ALSA-2020:1766
ALSA-2020:1766 · Moderate: GNOME security, bug fix, and enhancement update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337) * gdm: lock screen bypass when timed login is enabled (CVE-2019-3825) * gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447) * gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448) * gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
accountsservice-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 0.6.50-8.el8
Update to 0.6.50-8.el8
baobab AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.28.0-4.el8
Update to 3.28.0-4.el8
clutter AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.26.2-8.el8
Update to 1.26.2-8.el8
clutter-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.26.2-8.el8
Update to 1.26.2-8.el8
clutter-doc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.26.2-8.el8
Update to 1.26.2-8.el8
gjs-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.56.2-4.el8
Update to 1.56.2-4.el8
gnome-menus AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.13.3-11.el8
Update to 3.13.3-11.el8
gnome-menus-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.13.3-11.el8
Update to 3.13.3-11.el8
gnome-tweaks AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.28.1-7.el8
Update to 3.28.1-7.el8
mozjs52 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 52.9.0-2.el8.alma
Update to 52.9.0-2.el8.alma
mozjs52 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 52.9.0-2.el8
Update to 52.9.0-2.el8
mozjs52-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 52.9.0-2.el8.alma
Update to 52.9.0-2.el8.alma
mozjs52-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 52.9.0-2.el8
Update to 52.9.0-2.el8
mozjs60 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 60.9.0-4.el8.alma
Update to 60.9.0-4.el8.alma
mozjs60 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 60.9.0-4.el8
Update to 60.9.0-4.el8
mozjs60-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 60.9.0-4.el8
Update to 60.9.0-4.el8
mozjs60-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 60.9.0-4.el8.alma
Update to 60.9.0-4.el8.alma
vala AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 0.40.19-1.el8
Update to 0.40.19-1.el8
vala-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 0.40.19-1.el8
Update to 0.40.19-1.el8