Bug 29825

Summary:	gnome-shell new security issue CVE-2021-3982
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	andrewsfarm, brtians1, davidwhodgins, hdetavernier, mageia, olav, sysadmin-bugs
Version:	8	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA8-64-OK
Source RPM:	gnome-shell-3.38.3-2.mga8.src.rpm	CVE:
Status comment:

Description David Walser 2021-12-28 16:40:37 CET

Fedora has issued an advisory today (December 28):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SCLTOBHCAJ5W2MER2M53HAM2IBEBL2AC/

The fix is here:
https://src.fedoraproject.org/rpms/gnome-shell/c/837876b8ba9c8155ef16be1a08eeea038204663d?branch=f34

Mageia 8 is also affected.

David Walser 2021-12-28 16:41:01 CET

Status comment: (none) => Capabilities should be removed from gnome-shell binary
Whiteboard: (none) => MGA8TOO

Comment 1 Lewis Smith 2021-12-28 21:28:01 CET

Olav seems to be the actual maintainer of 'gnome-shell', so assigning this to you.

Assignee: bugsquad => olav

Comment 2 Nicolas Lécureuil 2021-12-29 00:20:23 CET

fixed in mga 8/9

src:
    - gnome-shell-3.38.3-2.1.mga8

Whiteboard: MGA8TOO => (none)
Status comment: Capabilities should be removed from gnome-shell binary => (none)
CC: (none) => mageia, olav
Version: Cauldron => 8

Nicolas Lécureuil 2021-12-29 00:21:31 CET

Assignee: olav => qa-bugs

Comment 3 Hugues Detavernier 2021-12-29 10:59:11 CET

Mageia 8 X64 Gnome

Installed without any problem.

Tested with some extensions without any problem (applications, places...).

seems to be ok.

CC: (none) => hdetavernier

Comment 4 Brian Rockwell 2022-01-03 16:32:37 CET

MGA8-64, Gnome, Laptop A6-APU

- gnome-shell-3.38.3-2.1.mga8.x86_64

testing now.

CC: (none) => brtians1

Comment 5 Brian Rockwell 2022-01-03 18:58:23 CET

used a number of the utilities.  No issues with them.  Multiple virtual windows, no issues.

I'm giving this a clean bill.

Whiteboard: (none) => MGA8-64-OK

Comment 6 Thomas Andrews 2022-01-04 19:02:40 CET

Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Dave Hodgins 2022-01-05 19:13:28 CET

CC: (none) => davidwhodgins
Keywords: (none) => advisory

Comment 7 Mageia Robot 2022-01-05 23:46:32 CET

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0007.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED