[Git][security-tracker-team/security-tracker][master] Add CVE-2023-43090/gnome-shell

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b51a523a by Salvatore Bonaccorso at 2023-09-16T12:17:22+02:00
Add CVE-2023-43090/gnome-shell

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5,6 +5,12 @@ CVE-2023-43091 [Code injection via service.json file]
 	NOTE: https://gitlab.gnome.org/GNOME/gnome-maps/-/issues/588
 	NOTE: Introduced with merge: https://gitlab.gnome.org/GNOME/gnome-maps/-/merge_requests/227 (v43.alpha)
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gnome-maps/-/commit/d26cd774d524404ef7784e6808f551de83de4bea (v45.rc)
+CVE-2023-43090 [Screenshot tool allows viewing open windows when session is locked]
+	- gnome-shell <unfixed>
+	NOTE: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990
+	NOTE: https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944
+	NOTE: https://gitlab.gnome.org/GNOME/gnome-shell/-/commit/521525948eed85cc27c0796a0b9569d161df81ba
+	NOTE: https://gitlab.gnome.org/GNOME/gnome-shell/-/commit/671df28a509ae208e158976f0855d91fdbea16a1
 CVE-2023-5001 (The Horizontal scrolling announcement for WordPress plugin for WordPre ...)
 	NOT-FOR-US: Horizontal scrolling announcement for WordPress plugin for WordPress
 CVE-2023-4994 (The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b51a523a0f8b0c0bb1ade18e560aa85aa7a2ada5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b51a523a0f8b0c0bb1ade18e560aa85aa7a2ada5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230916/9d2d2e5a/attachment.htm>