Most recent entries from all

ALSA-2020:1766 — Moderate: GNOME security, bug fix, and enhancement update

Affected: AlmaLinux:8: accountsservice-devel, AlmaLinux:8: baobab, AlmaLinux:8: clutter, AlmaLinux:8: clutter-devel, AlmaLinux:8: clutter-doc, AlmaLinux:8: gjs-devel, AlmaLinux:8: gnome-menus, AlmaLinux:8: gnome-menus-devel, AlmaLinux:8: gnome-tweaks, AlmaLinux:8: mozjs52 and 5 more

GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)

* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2019-02106

cnvd-2018-26473

EUVD-2026-70271

fkie_cve-2018-20337

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

GHSA-c9h6-p6mv-6rr7

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

gsd-2018-20337

openSUSE-SU-2019:0094-1 — Security update for libraw

Security update for libraw

SUSE-SU-2019:0133-1 — Security update for libraw

Security update for libraw

UBUNTU-CVE-2018-20337

Affected: Ubuntu:16.04:LTS: darktable, Ubuntu:16.04:LTS: dcraw, Ubuntu:16.04:LTS: exactimage, Ubuntu:16.04:LTS: kodi, Ubuntu:16.04:LTS: rawtherapee, Ubuntu:16.04:LTS: ufraw, Ubuntu:18.04:LTS: libraw, Ubuntu:18.04:LTS: darktable, Ubuntu:18.04:LTS: dcraw, Ubuntu:18.04:LTS: exactimage and 28 more

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.