https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:55:15.647477+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:1766 ALSA-2020:1766 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-02T20:55:15.831618+00:00

Affected: AlmaLinux:8: accountsservice-devel, AlmaLinux:8: baobab, AlmaLinux:8: clutter, AlmaLinux:8: clutter-devel, AlmaLinux:8: clutter-doc, AlmaLinux:8: gjs-devel, AlmaLinux:8: gnome-menus, AlmaLinux:8: gnome-menus-devel, AlmaLinux:8: gnome-tweaks, AlmaLinux:8: mozjs52 and 5 more

GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)

* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-02515 bdu:2019-02515 2026-10-02T20:55:15.831709+00:00 bdu:2019-02515 https://cve.radiocsirt.org/vuln/euvd-2026-55012 EUVD-2026-55012 2026-10-02T20:55:15.831727+00:00 EUVD-2026-55012 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12448 fkie_cve-2019-12448 2026-10-02T20:55:15.831740+00:00

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.

 https://cve.radiocsirt.org/vuln/ghsa-x42r-3m27-mhv7 GHSA-x42r-3m27-mhv7 2026-10-02T20:55:15.831762+00:00

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.

 https://cve.radiocsirt.org/vuln/gsd-2019-12448 gsd-2019-12448 2026-10-02T20:55:15.831777+00:00 gsd-2019-12448 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1697-1 openSUSE-SU-2019:1697-1 — Security update for gvfs 2026-10-02T20:55:15.831788+00:00

Security update for gvfs

 https://cve.radiocsirt.org/vuln/suse-su-2019:1717-1 SUSE-SU-2019:1717-1 — Security update for gvfs 2026-10-02T20:55:15.831806+00:00

Security update for gvfs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12448 UBUNTU-CVE-2019-12448 2026-10-02T20:55:15.831822+00:00

Affected: Ubuntu:18.04:LTS: gvfs

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1156 WID-SEC-W-2023-1156 — GNOME: Mehrere Schwachstellen 2026-10-02T20:55:15.831840+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNOME ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsmechanismen zu umgehen oder einen Denial of Service Zustand hervorzurufen.