https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:37:01.793474+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1586 ALSA-2021:1586 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-02T19:37:01.826875+00:00

Affected: AlmaLinux:8: OpenEXR-devel, AlmaLinux:8: OpenEXR-libs, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: atkmm, AlmaLinux:8: atkmm-devel, AlmaLinux:8: atkmm-doc, AlmaLinux:8: cairomm, AlmaLinux:8: cairomm-devel, AlmaLinux:8: cairomm-doc, AlmaLinux:8: chrome-gnome-shell and 71 more

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

* webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

* glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-00799 bdu:2020-00799 2026-10-02T19:37:01.827026+00:00 bdu:2020-00799 https://cve.radiocsirt.org/vuln/bell-cve-2019-13012 Withdrawn: BELL-CVE-2019-13012 — CVE-2019-13012 does not affect BellSoft software 2026-10-02T19:37:01.827045+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:37:01.827061+00:00 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/euvd-2026-55386 EUVD-2026-55386 2026-10-02T19:37:01.827075+00:00 EUVD-2026-55386 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13012 fkie_cve-2019-13012 2026-10-02T19:37:01.827086+00:00

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

 https://cve.radiocsirt.org/vuln/ghsa-4cmr-h54h-4w78 GHSA-4cmr-h54h-4w78 2026-10-02T19:37:01.827110+00:00

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

 https://cve.radiocsirt.org/vuln/gsd-2019-13012 gsd-2019-13012 2026-10-02T19:37:01.827127+00:00 gsd-2019-13012 https://cve.radiocsirt.org/vuln/msrc_cve-2019-13012 msrc_CVE-2019-13012 — The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_… 2026-10-02T19:37:01.827137+00:00 msrc_CVE-2019-13012 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1749-1 openSUSE-SU-2019:1749-1 — Security update for glib2 2026-10-02T19:37:01.827153+00:00

Security update for glib2

 https://cve.radiocsirt.org/vuln/suse-su-2019:1824-1 SUSE-SU-2019:1824-1 — Security update for glib2 2026-10-02T19:37:01.827169+00:00

Security update for glib2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13012 UBUNTU-CVE-2019-13012 2026-10-02T19:37:01.827183+00:00

Affected: Ubuntu:Pro:14.04:LTS: glib2.0, Ubuntu:16.04:LTS: glib2.0, Ubuntu:18.04:LTS: glib2.0

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1155 WID-SEC-W-2023-1155 — GNOME: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T19:37:01.827207+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GNOME ausnutzen, um Sicherheitsvorkehrungen zu umgehen.