https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:55:39.071091+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4381 ALSA-2021:4381 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-03T17:55:39.241668+00:00

Affected: AlmaLinux:8: LibRaw, AlmaLinux:8: LibRaw-devel, AlmaLinux:8: accountsservice, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: accountsservice-libs, AlmaLinux:8: gdm, AlmaLinux:8: gnome-autoar, AlmaLinux:8: gnome-calculator, AlmaLinux:8: gnome-classic-session, AlmaLinux:8: gnome-control-center and 47 more

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: gdm (40.0), webkit2gtk3 (2.32.3). (BZ#1909300)

Security Fix(es):

* webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution (CVE-2020-13558)

* LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp (CVE-2020-24870)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2020-27918)

* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1765)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-1788)

* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-1789)

* webkitgtk: Access to restricted ports on arbitrary servers via port redirection (CVE-2021-1799)

* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1801)

* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-1844)

* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1870)

* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1871)

* webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution (CVE-2021-21775)

* webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution (CVE-2021-21779)

* webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution…

 https://cve.radiocsirt.org/vuln/bdu:2021-01162 bdu:2021-01162 2026-10-03T17:55:39.241824+00:00 bdu:2021-01162 https://cve.radiocsirt.org/vuln/cleanstart-2023-ur27020 CLEANSTART-2023-UR27020 — autoar-extractor 2026-10-03T17:55:39.241843+00:00

Affected: CleanStart: gnome-autoar

Security vulnerability affects the gnome-autoar package. autoar-extractor.

 https://cve.radiocsirt.org/vuln/euvd-2026-48081 EUVD-2026-48081 2026-10-03T17:55:39.241864+00:00 EUVD-2026-48081 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36241 fkie_cve-2020-36241 2026-10-03T17:55:39.241876+00:00

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

 https://cve.radiocsirt.org/vuln/ghsa-vm56-hj47-795x GHSA-vm56-hj47-795x 2026-10-03T17:55:39.241898+00:00

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

 https://cve.radiocsirt.org/vuln/gsd-2020-36241 gsd-2020-36241 2026-10-03T17:55:39.241913+00:00 gsd-2020-36241 https://cve.radiocsirt.org/vuln/oesa-2021-1108 OESA-2021-1108 — gnome-autoar security update 2026-10-03T17:55:39.241923+00:00

Affected: openEuler:20.03-LTS: gnome-autoar, openEuler:20.03-LTS-SP1: gnome-autoar

Automatic archives creating and extracting library. Security Fix(es): autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.(CVE-2020-36241)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0390-1 openSUSE-SU-2021:0390-1 — Security update for gnome-autoar 2026-10-03T17:55:39.241945+00:00

Security update for gnome-autoar

 https://cve.radiocsirt.org/vuln/suse-su-2021:0664-1 SUSE-SU-2021:0664-1 — Security update for gnome-autoar 2026-10-03T17:55:39.241961+00:00

Security update for gnome-autoar

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36241 UBUNTU-CVE-2020-36241 2026-10-03T17:55:39.241975+00:00

Affected: Ubuntu:18.04:LTS: gnome-autoar, Ubuntu:20.04:LTS: gnome-autoar

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.