{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"Medium"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"gnome-shell security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for gnome-shell is now available for openEuler-24.03-LTS-SP3",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"The GNOME Shell redefines user interactions with the GNOME desktop. In particular, it offers new paradigms for launching applications, accessing documents, and organizing open windows in GNOME. Later, it will introduce a new applets eco-system and offer new solutions for other desktop features, such as notifications and contacts management. The GNOME Shell is intended to replace functions handled by the GNOME Panel and by the window manager in previous versions of GNOME. The GNOME Shell has rich visual effects enabled by new graphical technologies.\n\nSecurity Fix(es):\n\nIn GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.(CVE-2024-36472)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for gnome-shell is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP1/openEuler-22.03-LTS-SP3/openEuler-22.03-LTS-SP4/openEuler-24.03-LTS/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP2/openEuler-24.03-LTS-SP1/openEuler-24.03-LTS-SP3/openEuler-24.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"Medium",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"gnome-shell",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2026-2715",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2715"
			},
			{
				"summary":"CVE-2024-36472",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-36472&packageName=gnome-shell"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36472"
			},
			{
				"summary":"openEuler-SA-2026-2715 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-2715.json"
			}
		],
		"title":"An update for gnome-shell is now available for openEuler-24.03-LTS-SP3",
		"tracking":{
			"initial_release_date":"2026-06-30T20:09:16+08:00",
			"revision_history":[
				{
					"date":"2026-06-30T20:09:16+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-06-30T20:09:16+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-06-30T20:09:16+08:00",
			"id":"openEuler-SA-2026-2715",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"openEuler-24.03-LTS-SP3",
									"name":"openEuler-24.03-LTS-SP3"
								},
								"name":"openEuler-24.03-LTS-SP3",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-44.6-3.oe2403sp3.aarch64.rpm",
									"name":"gnome-shell-44.6-3.oe2403sp3.aarch64.rpm"
								},
								"name":"gnome-shell-44.6-3.oe2403sp3.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64.rpm",
									"name":"gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64.rpm"
								},
								"name":"gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64.rpm",
									"name":"gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64.rpm"
								},
								"name":"gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-44.6-3.oe2403sp3.src.rpm",
									"name":"gnome-shell-44.6-3.oe2403sp3.src.rpm"
								},
								"name":"gnome-shell-44.6-3.oe2403sp3.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-44.6-3.oe2403sp3.x86_64.rpm",
									"name":"gnome-shell-44.6-3.oe2403sp3.x86_64.rpm"
								},
								"name":"gnome-shell-44.6-3.oe2403sp3.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64.rpm",
									"name":"gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64.rpm"
								},
								"name":"gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64.rpm",
									"name":"gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64.rpm"
								},
								"name":"gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"noarch",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"gnome-shell-help-44.6-3.oe2403sp3.noarch.rpm",
									"name":"gnome-shell-help-44.6-3.oe2403sp3.noarch.rpm"
								},
								"name":"gnome-shell-help-44.6-3.oe2403sp3.noarch.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-44.6-3.oe2403sp3.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.aarch64",
					"name":"gnome-shell-44.6-3.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64",
					"name":"gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64",
					"name":"gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-44.6-3.oe2403sp3.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.src",
					"name":"gnome-shell-44.6-3.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-44.6-3.oe2403sp3.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.x86_64",
					"name":"gnome-shell-44.6-3.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64",
					"name":"gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64",
					"name":"gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"gnome-shell-help-44.6-3.oe2403sp3.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:gnome-shell-help-44.6-3.oe2403sp3.noarch",
					"name":"gnome-shell-help-44.6-3.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2024-36472",
			"notes":[
				{
					"text":"In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.aarch64",
					"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64",
					"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64",
					"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.src",
					"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.x86_64",
					"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64",
					"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64",
					"openEuler-24.03-LTS-SP3:gnome-shell-help-44.6-3.oe2403sp3.noarch"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.src",
						"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.x86_64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64",
						"openEuler-24.03-LTS-SP3:gnome-shell-help-44.6-3.oe2403sp3.noarch"
					],
					"details":"gnome-shell security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2715"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":6.5,
						"vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.aarch64",
						"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.src",
						"openEuler-24.03-LTS-SP3:gnome-shell-44.6-3.oe2403sp3.x86_64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debuginfo-44.6-3.oe2403sp3.x86_64",
						"openEuler-24.03-LTS-SP3:gnome-shell-debugsource-44.6-3.oe2403sp3.x86_64",
						"openEuler-24.03-LTS-SP3:gnome-shell-help-44.6-3.oe2403sp3.noarch"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2024-36472"
		}
	]
}