https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:48:27.644215+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:1766 ALSA-2020:1766 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-02T19:48:27.657592+00:00

Affected: AlmaLinux:8: accountsservice-devel, AlmaLinux:8: baobab, AlmaLinux:8: clutter, AlmaLinux:8: clutter-devel, AlmaLinux:8: clutter-doc, AlmaLinux:8: gjs-devel, AlmaLinux:8: gnome-menus, AlmaLinux:8: gnome-menus-devel, AlmaLinux:8: gnome-tweaks, AlmaLinux:8: mozjs52 and 5 more

GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)

* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-02106 bdu:2019-02106 2026-10-02T19:48:27.657677+00:00 bdu:2019-02106 https://cve.radiocsirt.org/vuln/cnvd-2018-26473 cnvd-2018-26473 2026-10-02T19:48:27.657694+00:00 cnvd-2018-26473 https://cve.radiocsirt.org/vuln/euvd-2026-70271 EUVD-2026-70271 2026-10-02T19:48:27.657707+00:00 EUVD-2026-70271 https://cve.radiocsirt.org/vuln/fkie_cve-2018-20337 fkie_cve-2018-20337 2026-10-02T19:48:27.657717+00:00

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

 https://cve.radiocsirt.org/vuln/ghsa-c9h6-p6mv-6rr7 GHSA-c9h6-p6mv-6rr7 2026-10-02T19:48:27.657738+00:00

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

 https://cve.radiocsirt.org/vuln/gsd-2018-20337 gsd-2018-20337 2026-10-02T19:48:27.657751+00:00 gsd-2018-20337 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0094-1 openSUSE-SU-2019:0094-1 — Security update for libraw 2026-10-02T19:48:27.657761+00:00

Security update for libraw

 https://cve.radiocsirt.org/vuln/suse-su-2019:0133-1 SUSE-SU-2019:0133-1 — Security update for libraw 2026-10-02T19:48:27.657779+00:00

Security update for libraw

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-20337 UBUNTU-CVE-2018-20337 2026-10-02T19:48:27.657796+00:00

Affected: Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:18.04:LTS: libraw, Ubuntu:18.04:LTS: darktable, Ubuntu:18.04:LTS: dcraw, Ubuntu:18.04:LTS: exactimage and 28 more

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.