Medium ELSA-2020-3978 2 CVEs

Moderate: glib2 and ibus security and bug fix update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

glib2
[2.56.1-7]
- Backport patch to limit access to files when copying (CVE-2019-12450)
Resolves: #1722099

[2.56.1-6]
- Backport patches for GDBus auth
Resolves: #1777221

ibus
[1.5.17-11]
- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows

Fixed packages 14

Release	Package	Fixed in
Oracle Linux · 7	glib2	0:2.56.1-7.el7
Oracle Linux · 7	glib2-devel	0:2.56.1-7.el7
Oracle Linux · 7	glib2-doc	0:2.56.1-7.el7
Oracle Linux · 7	glib2-fam	0:2.56.1-7.el7
Oracle Linux · 7	glib2-static	0:2.56.1-7.el7
Oracle Linux · 7	glib2-tests	0:2.56.1-7.el7
Oracle Linux · 7	ibus	0:1.5.17-11.el7
Oracle Linux · 7	ibus-devel	0:1.5.17-11.el7
Oracle Linux · 7	ibus-devel-docs	0:1.5.17-11.el7
Oracle Linux · 7	ibus-gtk2	0:1.5.17-11.el7
Oracle Linux · 7	ibus-gtk3	0:1.5.17-11.el7
Oracle Linux · 7	ibus-libs	0:1.5.17-11.el7
Oracle Linux · 7	ibus-pygtk2	0:1.5.17-11.el7
Oracle Linux · 7	ibus-setup	0:1.5.17-11.el7

Vulnerabilities 2

Unscored —

CVE-2019-12450

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while…

glib2.0 glib2.0 glib glib Debian Ubuntu Azure Linux Alpine

May 29, 2019
Unscored —

CVE-2019-14822

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method ca…

ibus ibus Debian Ubuntu

Nov 25, 2019