Summary
GNOME is the default desktop environment of AlmaLinux.
Security Fix(es):
* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)
* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | gdk-pixbuf2 | 2.36.12-5.el8 |
| AlmaLinux · 8 | gdk-pixbuf2-devel | 2.36.12-5.el8 |
| AlmaLinux · 8 | gdk-pixbuf2-modules | 2.36.12-5.el8 |
| AlmaLinux · 8 | gdk-pixbuf2-xlib | 2.36.12-5.el8 |
| AlmaLinux · 8 | gdk-pixbuf2-xlib-devel | 2.36.12-5.el8 |
| AlmaLinux · 8 | gnome-desktop3 | 3.32.2-1.el8 |
| AlmaLinux · 8 | gnome-desktop3-devel | 3.32.2-1.el8 |
| AlmaLinux · 8 | libpurple | 2.13.0-5.el8 |
| AlmaLinux · 8 | libpurple-devel | 2.13.0-5.el8 |
| AlmaLinux · 8 | pidgin | 2.13.0-5.el8 |
| AlmaLinux · 8 | pidgin-devel | 2.13.0-5.el8 |
Vulnerabilities 51
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…
KEV May 4, 2022 -
Medium 4.8
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actio…
-
Unscored —
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloadi…
-
Unscored —
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince thr…
-
Unscored —
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a pri…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirec…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Saf…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 1…
-
Unscored —CVE-2019-8558 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8601 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8611 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8622 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8623 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —CVE-2019-8671 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —CVE-2019-8690 Public exploit
A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …
-
Unscored —
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This i…
References
-
report
https://bugzilla.redhat.com/1662193
-
report
https://bugzilla.redhat.com/1667136
-
report
https://bugzilla.redhat.com/1667409
-
report
https://bugzilla.redhat.com/1669391
-
report
https://bugzilla.redhat.com/1673011
-
report
https://bugzilla.redhat.com/1674382
-
report
https://bugzilla.redhat.com/1679127
-
report
https://bugzilla.redhat.com/1680164
-
report
https://bugzilla.redhat.com/1685811
-
report
https://bugzilla.redhat.com/1687949
-
report
https://bugzilla.redhat.com/1690506
-
report
https://bugzilla.redhat.com/1696708
-
report
https://bugzilla.redhat.com/1698520
-
report
https://bugzilla.redhat.com/1698884
-
report
https://bugzilla.redhat.com/1698923
-
report
https://bugzilla.redhat.com/1698929
-
report
https://bugzilla.redhat.com/1698930
-
report
https://bugzilla.redhat.com/1704355
-
report
https://bugzilla.redhat.com/1704360
-
report
https://bugzilla.redhat.com/1704378
-
report
https://bugzilla.redhat.com/1705583
-
report
https://bugzilla.redhat.com/1706793
-
report
https://bugzilla.redhat.com/1709289
-
report
https://bugzilla.redhat.com/1709937
-
report
https://bugzilla.redhat.com/1713080
-
report
https://bugzilla.redhat.com/1713330
-
report
https://bugzilla.redhat.com/1713453
-
report
https://bugzilla.redhat.com/1713685
-
report
https://bugzilla.redhat.com/1715738
-
report
https://bugzilla.redhat.com/1715761
-
report
https://bugzilla.redhat.com/1715765
-
report
https://bugzilla.redhat.com/1716295
-
report
https://bugzilla.redhat.com/1716771
-
report
https://bugzilla.redhat.com/1718133
-
report
https://bugzilla.redhat.com/1719199
-
report
https://bugzilla.redhat.com/1719206
-
report
https://bugzilla.redhat.com/1719208
-
report
https://bugzilla.redhat.com/1719209
-
report
https://bugzilla.redhat.com/1719210