https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:59:46 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:3553 <p><strong>Affected:</strong> AlmaLinux:8: gdk-pixbuf2, AlmaLinux:8: gdk-pixbuf2-devel, AlmaLinux:8: gdk-pixbuf2-modules, AlmaLinux:8: gdk-pixbuf2-xlib, AlmaLinux:8: gdk-pixbuf2-xlib-devel, AlmaLinux:8: gnome-desktop3, AlmaLinux:8: gnome-desktop3-devel, AlmaLinux:8: libpurple, AlmaLinux:8: libpurple-devel, AlmaLinux:8: pidgin and 1 more</p> <p>GNOME is the default desktop environment of AlmaLinux.</p> <p>Security Fix(es):</p> <p>* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)</p> <p>* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: gdk-pixbuf2, AlmaLinux:8: gdk-pixbuf2-devel, AlmaLinux:8: gdk-pixbuf2-modules, AlmaLinux:8: gdk-pixbuf2-xlib, AlmaLinux:8: gdk-pixbuf2-xlib-devel, AlmaLinux:8: gnome-desktop3, AlmaLinux:8: gnome-desktop3-devel, AlmaLinux:8: libpurple, AlmaLinux:8: libpurple-devel, AlmaLinux:8: pidgin and 1 more</p> <p>GNOME is the default desktop environment of AlmaLinux.</p> <p>Security Fix(es):</p> <p>* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)</p> <p>* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:3553 https://cve.radiocsirt.org/vuln/bdu:2019-02517 bdu:2019-02517 https://cve.radiocsirt.org/vuln/bdu:2019-02517 https://cve.radiocsirt.org/vuln/euvd-2026-55213 EUVD-2026-55213 https://cve.radiocsirt.org/vuln/euvd-2026-55213 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12795 <p>daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)</p> <p>daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12795 https://cve.radiocsirt.org/vuln/ghsa-whx7-c8j2-42vv <p>daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)</p> <p>daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)</p> https://cve.radiocsirt.org/vuln/ghsa-whx7-c8j2-42vv https://cve.radiocsirt.org/vuln/gsd-2019-12795 gsd-2019-12795 https://cve.radiocsirt.org/vuln/gsd-2019-12795 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1697-1 <p>Security update for gvfs</p> <p>Security update for gvfs</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1697-1 https://cve.radiocsirt.org/vuln/suse-su-2019:1717-1 <p>Security update for gvfs</p> <p>Security update for gvfs</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1717-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12795 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gvfs, Ubuntu:18.04:LTS: gvfs</p> <p>daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gvfs, Ubuntu:18.04:LTS: gvfs</p> <p>daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12795