DEBIAN-CVE-2023-43090

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

References

https://security-tracker.debian.org/tracker/CVE-2023-43090

Affected packages

Debian:12 / gnome-shell

Package

Name: gnome-shell
Purl: pkg:deb/debian/gnome-shell?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

43.6-1~deb12u2

Affected versions

43.*

43.4-1

43.6-1~deb12u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-43090.json"

Debian:13 / gnome-shell

Package

Name: gnome-shell
Purl: pkg:deb/debian/gnome-shell?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

44.5-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-43090.json"

Debian:14 / gnome-shell

Package

Name: gnome-shell
Purl: pkg:deb/debian/gnome-shell?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

44.5-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-43090.json"