https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:01:57.207325+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4451 ALSA-2020:4451 — Moderate: GNOME security, bug fix, and enhancement update 2026-10-03T10:01:57.358255+00:00

Affected: AlmaLinux:8: LibRaw-devel, AlmaLinux:8: PackageKit, AlmaLinux:8: PackageKit-command-not-found, AlmaLinux:8: PackageKit-cron, AlmaLinux:8: PackageKit-glib, AlmaLinux:8: PackageKit-glib-devel, AlmaLinux:8: PackageKit-gstreamer-plugin, AlmaLinux:8: PackageKit-gtk3-module, AlmaLinux:8: dleyna-renderer, AlmaLinux:8: frei0r-devel and 28 more

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406)

Security Fix(es):

* webkitgtk: Multiple security issues (CVE-2019-8625, CVE-2019-8710, CVE-2019-8720, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925, CVE-2020-10018, CVE-2020-11793)

* gnome-settings-daemon: AlmaLinux Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391)

* LibRaw: lack of thumbnail size range check can lead to buffer overflow (CVE-2020-15503)

For more details about the security issue(s), including the impact, a CVSS s…

 https://cve.radiocsirt.org/vuln/euvd-2026-36206 EUVD-2026-36206 2026-10-03T10:01:57.358394+00:00 EUVD-2026-36206 https://cve.radiocsirt.org/vuln/fkie_cve-2020-3864 fkie_cve-2020-3864 2026-10-03T10:01:57.358413+00:00

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

 https://cve.radiocsirt.org/vuln/ghsa-wwr3-9qhx-q62f GHSA-wwr3-9qhx-q62f 2026-10-03T10:01:57.358438+00:00

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

 https://cve.radiocsirt.org/vuln/gsd-2020-3864 gsd-2020-3864 2026-10-03T10:01:57.358454+00:00 gsd-2020-3864 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0278-1 openSUSE-SU-2020:0278-1 — Security update for webkit2gtk3 2026-10-03T10:01:57.358465+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/suse-su-2020:0468-1 SUSE-SU-2020:0468-1 — Security update for webkit2gtk3 2026-10-03T10:01:57.358487+00:00

Security update for webkit2gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-3864 UBUNTU-CVE-2020-3864 2026-10-03T10:01:57.358506+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 2 more

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1479 WID-SEC-W-2024-1479 — Red Hat Enterprise Linux/WebKitGTK: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutz… 2026-10-03T10:01:57.358543+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.