https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:01:31.925238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4381 ALSA-2021:4381 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-04T20:01:32.135033+00:00

Affected: AlmaLinux:8: LibRaw, AlmaLinux:8: LibRaw-devel, AlmaLinux:8: accountsservice, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: accountsservice-libs, AlmaLinux:8: gdm, AlmaLinux:8: gnome-autoar, AlmaLinux:8: gnome-calculator, AlmaLinux:8: gnome-classic-session, AlmaLinux:8: gnome-control-center and 47 more

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: gdm (40.0), webkit2gtk3 (2.32.3). (BZ#1909300)

Security Fix(es):

* webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution (CVE-2020-13558)

* LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp (CVE-2020-24870)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2020-27918)

* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1765)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-1788)

* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-1789)

* webkitgtk: Access to restricted ports on arbitrary servers via port redirection (CVE-2021-1799)

* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1801)

* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-1844)

* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1870)

* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1871)

* webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution (CVE-2021-21775)

* webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution (CVE-2021-21779)

* webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution…

 https://cve.radiocsirt.org/vuln/bdu:2021-04597 bdu:2021-04597 2026-10-04T20:01:32.135171+00:00 bdu:2021-04597 https://cve.radiocsirt.org/vuln/cnvd-2021-43527 cnvd-2021-43527 2026-10-04T20:01:32.135190+00:00 cnvd-2021-43527 https://cve.radiocsirt.org/vuln/euvd-2026-45281 EUVD-2026-45281 2026-10-04T20:01:32.135203+00:00 EUVD-2026-45281 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24870 fkie_cve-2020-24870 2026-10-04T20:01:32.135225+00:00

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

 https://cve.radiocsirt.org/vuln/ghsa-p736-65cp-9pj8 GHSA-p736-65cp-9pj8 2026-10-04T20:01:32.135249+00:00

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

 https://cve.radiocsirt.org/vuln/gsd-2020-24870 gsd-2020-24870 2026-10-04T20:01:32.135263+00:00 gsd-2020-24870 https://cve.radiocsirt.org/vuln/rhsa-2021:4381 RHSA-2021:4381 — Red Hat Security Advisory: GNOME security, bug fix, and enhancement update 2026-10-04T20:01:32.135275+00:00

webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp webkitgtk: Use-after-free leading to arbitrary code execution webkitgtk: User may be unable to fully delete browsing history gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory webkitgtk: IFrame sandboxing policy violation webkitgtk: Use-after-free leading to arbitrary code execution webkitgtk: Type confusion issue leading to arbitrary code execution webkitgtk: Access to restricted ports on arbitrary servers via port redirection webkitgtk: IFrame sandboxing policy violation webkitgtk: Memory corruption issue leading to arbitrary code execution webkitgtk: Logic issue leading to arbitrary code execution webkitgtk: Logic issue leading to arbitrary code execution webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory (incomplete CVE-2020-36241 fix) webkitgtk: Integer overflow leading to arbitrary code execution webkitgtk: Memory corruption leading to arbitrary code execution webkit…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-24870 UBUNTU-CVE-2020-24870 2026-10-04T20:01:32.135341+00:00

Affected: Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:18.04:LTS: darktable, Ubuntu:18.04:LTS: dcraw, Ubuntu:18.04:LTS: exactimage, Ubuntu:18.04:LTS: kodi and 27 more

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.