Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-36472: In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | gnome-shell | 0:3.28.3-34.amzn2.0.1 |
| Amazon Linux · 2 | gnome-shell-debuginfo | 0:3.28.3-34.amzn2.0.1 |
Vulnerabilities 1
-
Medium 6.5
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-36472.html