https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:59:57.785932+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3553 ALSA-2019:3553 — Low: GNOME security, bug fix, and enhancement update 2026-10-02T14:59:57.863217+00:00

Affected: AlmaLinux:8: gdk-pixbuf2, AlmaLinux:8: gdk-pixbuf2-devel, AlmaLinux:8: gdk-pixbuf2-modules, AlmaLinux:8: gdk-pixbuf2-xlib, AlmaLinux:8: gdk-pixbuf2-xlib-devel, AlmaLinux:8: gnome-desktop3, AlmaLinux:8: gnome-desktop3-devel, AlmaLinux:8: libpurple, AlmaLinux:8: libpurple-devel, AlmaLinux:8: pidgin and 1 more

GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)

* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-02517 bdu:2019-02517 2026-10-02T14:59:57.863352+00:00 bdu:2019-02517 https://cve.radiocsirt.org/vuln/euvd-2026-55213 EUVD-2026-55213 2026-10-02T14:59:57.863372+00:00 EUVD-2026-55213 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12795 fkie_cve-2019-12795 2026-10-02T14:59:57.863385+00:00

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)

 https://cve.radiocsirt.org/vuln/ghsa-whx7-c8j2-42vv GHSA-whx7-c8j2-42vv 2026-10-02T14:59:57.863409+00:00

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)

 https://cve.radiocsirt.org/vuln/gsd-2019-12795 gsd-2019-12795 2026-10-02T14:59:57.863426+00:00 gsd-2019-12795 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1697-1 openSUSE-SU-2019:1697-1 — Security update for gvfs 2026-10-02T14:59:57.863436+00:00

Security update for gvfs

 https://cve.radiocsirt.org/vuln/suse-su-2019:1717-1 SUSE-SU-2019:1717-1 — Security update for gvfs 2026-10-02T14:59:57.863454+00:00

Security update for gvfs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12795 UBUNTU-CVE-2019-12795 2026-10-02T14:59:57.863470+00:00

Affected: Ubuntu:16.04:LTS: gvfs, Ubuntu:18.04:LTS: gvfs

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)