ALSA-2020:1766

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/8/ALSA-2020-1766.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2020:1766.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2020:1766

Related

Published

2020-04-28T09:13:23Z

Modified

2021-11-12T10:20:55Z

Summary

Moderate: GNOME security, bug fix, and enhancement update

Details

GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp (CVE-2018-20337)
gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)
gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)
gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing queryinfoon_read/write (CVE-2019-12448)
gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / accountsservice-devel

Package

Name: accountsservice-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.50-8.el8

AlmaLinux:8 / baobab

Package

Name: baobab

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.28.0-4.el8

AlmaLinux:8 / clutter

Package

Name: clutter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.26.2-8.el8

AlmaLinux:8 / clutter-devel

Package

Name: clutter-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.26.2-8.el8

AlmaLinux:8 / clutter-doc

Package

Name: clutter-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.26.2-8.el8

AlmaLinux:8 / gjs-devel

Package

Name: gjs-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.56.2-4.el8

AlmaLinux:8 / gnome-menus

Package

Name: gnome-menus

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.13.3-11.el8

AlmaLinux:8 / gnome-menus-devel

Package

Name: gnome-menus-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.13.3-11.el8

AlmaLinux:8 / gnome-tweaks

Package

Name: gnome-tweaks

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.28.1-7.el8

AlmaLinux:8 / mozjs52

Package

Name: mozjs52

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

52.9.0-2.el8.alma

AlmaLinux:8 / mozjs52

Package

Name: mozjs52

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

52.9.0-2.el8

AlmaLinux:8 / mozjs52-devel

Package

Name: mozjs52-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

52.9.0-2.el8.alma

AlmaLinux:8 / mozjs52-devel

Package

Name: mozjs52-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

52.9.0-2.el8

AlmaLinux:8 / mozjs60

Package

Name: mozjs60

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

60.9.0-4.el8.alma

AlmaLinux:8 / mozjs60

Package

Name: mozjs60

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

60.9.0-4.el8

AlmaLinux:8 / mozjs60-devel

Package

Name: mozjs60-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

60.9.0-4.el8

AlmaLinux:8 / mozjs60-devel

Package

Name: mozjs60-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

60.9.0-4.el8.alma

AlmaLinux:8 / vala

Package

Name: vala

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.40.19-1.el8

AlmaLinux:8 / vala-devel

Package

Name: vala-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.40.19-1.el8