Most recent entries from all

ALSA-2021:1586 — Moderate: GNOME security, bug fix, and enhancement update

Affected: AlmaLinux:8: OpenEXR-devel, AlmaLinux:8: OpenEXR-libs, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: atkmm, AlmaLinux:8: atkmm-devel, AlmaLinux:8: atkmm-doc, AlmaLinux:8: cairomm, AlmaLinux:8: cairomm-devel, AlmaLinux:8: cairomm-doc, AlmaLinux:8: chrome-gnome-shell and 71 more

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

* webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

* glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2020-00799

Withdrawn: BELL-CVE-2019-13012 — CVE-2019-13012 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2021-avi-791

EUVD-2026-55386

fkie_cve-2019-13012

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

GHSA-4cmr-h54h-4w78

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.

gsd-2019-13012

msrc_CVE-2019-13012 — The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_…

msrc_CVE-2019-13012

openSUSE-SU-2019:1749-1 — Security update for glib2

Security update for glib2

SUSE-SU-2019:1824-1 — Security update for glib2

Security update for glib2

UBUNTU-CVE-2019-13012

Affected: Ubuntu:Pro:14.04:LTS: glib2.0, Ubuntu:16.04:LTS: glib2.0, Ubuntu:18.04:LTS: glib2.0

WID-SEC-W-2023-1155 — GNOME: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GNOME ausnutzen, um Sicherheitsvorkehrungen zu umgehen.