Bug 29825 - gnome-shell new security issue CVE-2021-3982
Summary: gnome-shell new security issue CVE-2021-3982
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2021-12-28 16:40 CET by David Walser
Modified: 2022-01-05 23:46 CET (History)
7 users (show)

See Also:
Source RPM: gnome-shell-3.38.3-2.mga8.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

David Walser 2021-12-28 16:41:01 CET

Status comment: (none) => Capabilities should be removed from gnome-shell binary
Whiteboard: (none) => MGA8TOO

Comment 1 Lewis Smith 2021-12-28 21:28:01 CET 
Olav seems to be the actual maintainer of 'gnome-shell', so assigning this to you.

Assignee: bugsquad => olav

Comment 2 Nicolas Lécureuil 2021-12-29 00:20:23 CET 
fixed in mga 8/9

src:
    - gnome-shell-3.38.3-2.1.mga8

Whiteboard: MGA8TOO => (none)
Status comment: Capabilities should be removed from gnome-shell binary => (none)
CC: (none) => mageia, olav
Version: Cauldron => 8

Nicolas Lécureuil 2021-12-29 00:21:31 CET

Assignee: olav => qa-bugs

Comment 3 Hugues Detavernier 2021-12-29 10:59:11 CET 
Mageia 8 X64 Gnome

Installed without any problem.

Tested with some extensions without any problem (applications, places...).

seems to be ok.

CC: (none) => hdetavernier

Comment 4 Brian Rockwell 2022-01-03 16:32:37 CET 
MGA8-64, Gnome, Laptop A6-APU

- gnome-shell-3.38.3-2.1.mga8.x86_64

testing now.

CC: (none) => brtians1

Comment 5 Brian Rockwell 2022-01-03 18:58:23 CET 
used a number of the utilities.  No issues with them.  Multiple virtual windows, no issues.

I'm giving this a clean bill.

Whiteboard: (none) => MGA8-64-OK

Comment 6 Thomas Andrews 2022-01-04 19:02:40 CET 
Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Dave Hodgins 2022-01-05 19:13:28 CET

CC: (none) => davidwhodgins
Keywords: (none) => advisory

Comment 7 Mageia Robot 2022-01-05 23:46:32 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0007.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.