Test ID:	1.3.6.1.4.1.25623.1.0.892374
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-2374-1)
Summary:	The remote host is missing an update for the Debian 'gnome-shell' package(s) announced via the DLA-2374-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'gnome-shell' package(s) announced via the DLA-2374-1 advisory. Vulnerability Insight: It was discovered that there was an issue around revealing passwords in the gnome-shell component of the GNOME desktop. In certain configurations, when logging out of an account the password box from the login dialog could reappear with the password visible in cleartext. CVE-2020-17489 An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.) For Debian 9 Stretch, these problems have been fixed in version 3.22.3-3+deb9u1. We recommend that you upgrade your gnome-shell packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'gnome-shell' package(s) on Debian 9. Solution: Please install the updated package(s). CVSS Score: 1.9 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-17489 https://security.gentoo.org/glsa/202009-08 https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997 https://lists.debian.org/debian-lts-announce/2020/09/msg00014.html SuSE Security Announcement: openSUSE-SU-2020:1861 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html https://usn.ubuntu.com/4464-1/
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.