portage-ng / portage / gnome-base / gnome-desktop / 44.1-r400
portage-ng glsa
1 advisory reference gnome-base/gnome-desktop · none place version 44.1-r400 in a vulnerable range
▸ GLSA 201908-28 GNOME desktop library: Security bypass this version unaffected normal local 2019-08-31

A vulnerability in the GNOME desktop library may allow attackers to escape the sandbox.

Announced
2019-08-31
Revised
2019-08-31
Access
local
Bugs
#692782
Advisory
https://security.gentoo.org/glsa/201908-28

Affected packages

PackageArchVulnerableUnaffected
gnome-base/gnome-desktop*< 3.30.2.3>= 3.30.2.3

Background

Library with common API for various GNOME modules.

Description

A vulnerability was discovered in the GNOME desktop library which allows an attacker to escape the sandbox.

Impact

A local attacker could possibly bypass sandbox protection.

Workaround

There is no known workaround at this time.

Resolution

All GNOME desktop library users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=gnome-base/gnome-desktop-3.30.2.3"

References