Most recent entries from all

ALSA-2020:1766 — Moderate: GNOME security, bug fix, and enhancement update

Affected: AlmaLinux:8: accountsservice-devel, AlmaLinux:8: baobab, AlmaLinux:8: clutter, AlmaLinux:8: clutter-devel, AlmaLinux:8: clutter-doc, AlmaLinux:8: gjs-devel, AlmaLinux:8: gnome-menus, AlmaLinux:8: gnome-menus-devel, AlmaLinux:8: gnome-tweaks, AlmaLinux:8: mozjs52 and 5 more

GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)

* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2019-02514

EUVD-2026-55013

fkie_cve-2019-12447

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

GHSA-4hjh-mpfm-qhm5

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

gsd-2019-12447

openSUSE-SU-2019:1697-1 — Security update for gvfs

Security update for gvfs

SUSE-SU-2019:1717-1 — Security update for gvfs

Security update for gvfs

UBUNTU-CVE-2019-12447

Affected: Ubuntu:18.04:LTS: gvfs

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

WID-SEC-W-2023-1156 — GNOME: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNOME ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsmechanismen zu umgehen oder einen Denial of Service Zustand hervorzurufen.