RLSA-2020:1766
- Source
- https://errata.rockylinux.org/RLSA-2020:1766
- Import Source
- https://storage.googleapis.com/resf-osv-data/RLSA-2020:1766.json
- JSON Data
- https://api.osv.dev/v1/vulns/RLSA-2020:1766
- Related
- Published
- 2020-04-28T09:13:23Z
- Modified
- 2023-02-02T12:50:38.861835Z
- Severity
-
- 6.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- Moderate: GNOME security, bug fix, and enhancement update
- Details
-
GNOME is the default desktop environment of Rocky Linux.
Security Fix(es):
LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp (CVE-2018-20337)
gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)
gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)
gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing queryinfoon_read/write (CVE-2019-12448)
gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.
- References
-
- https://errata.rockylinux.org/RLSA-2020:1766
- https://bugzilla.redhat.com/show_bug.cgi?id=1365717
- https://bugzilla.redhat.com/show_bug.cgi?id=1656988
- https://bugzilla.redhat.com/show_bug.cgi?id=1658001
- https://bugzilla.redhat.com/show_bug.cgi?id=1661555
- https://bugzilla.redhat.com/show_bug.cgi?id=1666070
- https://bugzilla.redhat.com/show_bug.cgi?id=1668901
- https://bugzilla.redhat.com/show_bug.cgi?id=1671744
- https://bugzilla.redhat.com/show_bug.cgi?id=1672825
- https://bugzilla.redhat.com/show_bug.cgi?id=1674535
- https://bugzilla.redhat.com/show_bug.cgi?id=1684729
- https://bugzilla.redhat.com/show_bug.cgi?id=1687979
- https://bugzilla.redhat.com/show_bug.cgi?id=1690170
- https://bugzilla.redhat.com/show_bug.cgi?id=1692299
- https://bugzilla.redhat.com/show_bug.cgi?id=1710882
- https://bugzilla.redhat.com/show_bug.cgi?id=1715890
- https://bugzilla.redhat.com/show_bug.cgi?id=1716754
- https://bugzilla.redhat.com/show_bug.cgi?id=1716761
- https://bugzilla.redhat.com/show_bug.cgi?id=1716767
- https://bugzilla.redhat.com/show_bug.cgi?id=1716774
- https://bugzilla.redhat.com/show_bug.cgi?id=1719819
- https://bugzilla.redhat.com/show_bug.cgi?id=1720249
- https://bugzilla.redhat.com/show_bug.cgi?id=1720251
- https://bugzilla.redhat.com/show_bug.cgi?id=1721124
- https://bugzilla.redhat.com/show_bug.cgi?id=1721133
- https://bugzilla.redhat.com/show_bug.cgi?id=1723462
- https://bugzilla.redhat.com/show_bug.cgi?id=1723464
- https://bugzilla.redhat.com/show_bug.cgi?id=1724302
- https://bugzilla.redhat.com/show_bug.cgi?id=1725154
- https://bugzilla.redhat.com/show_bug.cgi?id=1728330
- https://bugzilla.redhat.com/show_bug.cgi?id=1728562
- https://bugzilla.redhat.com/show_bug.cgi?id=1728564
- https://bugzilla.redhat.com/show_bug.cgi?id=1728567
- https://bugzilla.redhat.com/show_bug.cgi?id=1730612
- https://bugzilla.redhat.com/show_bug.cgi?id=1730891
- https://bugzilla.redhat.com/show_bug.cgi?id=1736742
- https://bugzilla.redhat.com/show_bug.cgi?id=1742710
- https://bugzilla.redhat.com/show_bug.cgi?id=1744452
- https://bugzilla.redhat.com/show_bug.cgi?id=1744527
- https://bugzilla.redhat.com/show_bug.cgi?id=1745147
- https://bugzilla.redhat.com/show_bug.cgi?id=1747972
- https://bugzilla.redhat.com/show_bug.cgi?id=1749372
- https://bugzilla.redhat.com/show_bug.cgi?id=1750516
- https://bugzilla.redhat.com/show_bug.cgi?id=1753520
- https://bugzilla.redhat.com/show_bug.cgi?id=1759075
- https://bugzilla.redhat.com/show_bug.cgi?id=1759525
- https://bugzilla.redhat.com/show_bug.cgi?id=1759619
- https://bugzilla.redhat.com/show_bug.cgi?id=1759913
- https://bugzilla.redhat.com/show_bug.cgi?id=1760363
- https://bugzilla.redhat.com/show_bug.cgi?id=1763207
- https://bugzilla.redhat.com/show_bug.cgi?id=1765448
- https://bugzilla.redhat.com/show_bug.cgi?id=1765632
- https://bugzilla.redhat.com/show_bug.cgi?id=1766649
- https://bugzilla.redhat.com/show_bug.cgi?id=1766695
- https://bugzilla.redhat.com/show_bug.cgi?id=1768461
- https://bugzilla.redhat.com/show_bug.cgi?id=1776530
- https://bugzilla.redhat.com/show_bug.cgi?id=1777556
- https://bugzilla.redhat.com/show_bug.cgi?id=1777911
- https://bugzilla.redhat.com/show_bug.cgi?id=1778668
- https://bugzilla.redhat.com/show_bug.cgi?id=1782425
- https://bugzilla.redhat.com/show_bug.cgi?id=1782497
- https://bugzilla.redhat.com/show_bug.cgi?id=1782517
- https://bugzilla.redhat.com/show_bug.cgi?id=1785233
- https://bugzilla.redhat.com/show_bug.cgi?id=1789474
- https://bugzilla.redhat.com/show_bug.cgi?id=1793413
- https://bugzilla.redhat.com/show_bug.cgi?id=1804123
- https://bugzilla.redhat.com/show_bug.cgi?id=1809079
- Credits
-
-
- Rocky Enterprise Software Foundation
-
- Red Hat
-
Affected packages
Rocky Linux:8 / baobab
Package
- Name
- baobab
- Purl
- pkg:rpm/rocky-linux/baobab?distro=rocky-linux-8-4-legacy&epoch=0
Rocky Linux:8 / clutter
Package
- Name
- clutter
- Purl
- pkg:rpm/rocky-linux/clutter?distro=rocky-linux-8&epoch=0
Rocky Linux:8 / gnome-menus
Package
- Name
- gnome-menus
- Purl
- pkg:rpm/rocky-linux/gnome-menus?distro=rocky-linux-8&epoch=0
Rocky Linux:8 / gnome-tweaks
Package
- Name
- gnome-tweaks
- Purl
- pkg:rpm/rocky-linux/gnome-tweaks?distro=rocky-linux-8&epoch=0
Rocky Linux:8 / mozjs52
Package
- Name
- mozjs52
- Purl
- pkg:rpm/rocky-linux/mozjs52?distro=rocky-linux-8&epoch=0
Rocky Linux:8 / mozjs60
Package
- Name
- mozjs60
- Purl
- pkg:rpm/rocky-linux/mozjs60?distro=rocky-linux-8&epoch=0