OESA-2026-4854

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4854

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4854.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-4854

Upstream

CVE-2026-91786

Published

2026-11-11T12:26:52Z

Modified

2026-11-11T12:45:12Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H CVSS Calculator

Summary

gnome-shell security update

Details

The GNOME Shell redefines user interactions with the GNOME desktop. In particular, it offers new paradigms for launching applications, accessing documents, and organizing open windows in GNOME. Later, it will introduce a new applets eco-system and offer new solutions for other desktop features, such as notifications and contacts management. The GNOME Shell is intended to replace functions handled by the GNOME Panel and by the window manager in previous versions of GNOME. The GNOME Shell has rich visual effects enabled by new graphical technologies.

Security Fix(es):

A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing oversized icon dimensions, leading to an out-of-bounds read. This can cause the GNOME Shell process to crash, disrupting the user's session, and potentially disclose sensitive information from adjacent memory.(CVE-2026-91786)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:24.03-LTS-SP3 / gnome-shell

Package

Name: gnome-shell
Purl: pkg:rpm/openEuler/gnome-shell&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

44.6-4.oe2403sp3

Ecosystem specific

{
    "aarch64": [
        "gnome-shell-44.6-4.oe2403sp3.aarch64.rpm",
        "gnome-shell-debuginfo-44.6-4.oe2403sp3.aarch64.rpm",
        "gnome-shell-debugsource-44.6-4.oe2403sp3.aarch64.rpm"
    ],
    "noarch": [
        "gnome-shell-help-44.6-4.oe2403sp3.noarch.rpm"
    ],
    "src": [
        "gnome-shell-44.6-4.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "gnome-shell-44.6-4.oe2403sp3.x86_64.rpm",
        "gnome-shell-debuginfo-44.6-4.oe2403sp3.x86_64.rpm",
        "gnome-shell-debugsource-44.6-4.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4854.json"