Skip to content
OpenAdvisories
Medium ALAS2-2024-2714 1 CVE

Moderate: gnome-shell security update (Amazon Linux 2)

Published Dec 5, 2024 · Updated Dec 19, 2024

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-36472: In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 gnome-shell 0:3.28.3-34.amzn2.0.1
Amazon Linux · 2 gnome-shell-debuginfo 0:3.28.3-34.amzn2.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-36472.html