Headline
CVE-2023-43090: screenshot: Some fixes to shortcut handling (!2944) · Merge requests · GNOME / gnome-shell · GitLab
A vulnerability was found in GNOME Shell. GNOME Shell’s lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.
- Review changes
Download
Patches
Plain diff
Related news
Ubuntu Security Notice USN-6395-1
Ubuntu Security Notice 6395-1 - Mickael Karatekin discovered that GNOME Shell incorrectly allowed the screenshot tool to view open windows when a session was locked. A local attacker could possibly use this issue to obtain sensitive information.
Debian Security Advisory 5501-1
Debian Linux Security Advisory 5501-1 - Mickael Karatekin discovered that the GNOME session locking didn't restrict a keyboard shortcut used for taking screenshots in GNOME Screenshot which could result in information disclosure.