ELSA-2020-4451 — Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)

Summary

dleyna-renderer
[0.6.0-3]
- Add a manual
Resolves: #1612579

frei0r-plugins
[1.6.1-7]
- Rebuild with newer annobin to fix rpmdiff problems
- Fix the build with a newer opencv
- Resolves: rhbz#1703994

gdm
[3.28.3-34]
- Fix file descriptor leak
Resolves: #1877853

[3.28.3-33]
- Fix problem with Xorg fallback
Resolves: #1868260

[3.28.3-32]
- Add dconf db to file manifest
Related: #1833158

[3.28.3-31]
- add back gdm system db to dconf profile
Resolves: #1833158

[3.28.3-30]
- Make sure login screen is killed during login
Resolves: #1618481

gnome-control-center
[3.28.2-22]
- Categorize Infiniband devices correctly
Resolves: #1826379

[3.28.2-21]
- Honor sound theme changes when changing from the default theme
- Resolves: #1706008

[3.28.2-20]
- Fix 90min automatic sleep option to not last 80min
- Resolves: #1706076

gnome-photos
[3.28.1-3]
- Disable Python 2 during the build - itstool doesnt need it anymore
Resolves: #1597806

[3.28.1-2]
- rebuild

gnome-remote-desktop
[0.1.8-3]
- Backport cursor only frame fixes
Related: #1837406

[0.1.8-2]
- Dont crash on metadata only buffers
Resolves: #1847062

[0.1.8-1]
- Rebase to 0.1.8
Resolves: #1837406

gnome-session
[3.28.1-10.0.1]
- Update kiosk-session subpackage with Oracle references [Orabug: 32095108]

[3.28.1-10]
- Show cursor explicitly from session selector
Resolves: #1624430

[3.28.1-9]
- Add kiosk-session subpackage to help users set up RHEL for
kiosk/point-of-sale use.
Resolves: #1739556

gnome-settings-daemon
[3.32.0-11]
- Remove subman plugin for now
Resolves: #1872457

[3.32.0-10]
- Disable subman plugin on CentOS
Resolves: #1827030

gnome-shell
[3.32.2-20]
- Fix popupMenu keynav when NumLock is active
Resolves: #1840080

[3.32.2-19]
- Fix last backport
Resolves: #1847051

[3.32.2-18]
- Fix more spurious allocation warnings
Resolves: #1715845

[3.32.2-17]
- Really allow using perf-tool on wayland
Resolves: #1652178
- Fix timed login without user list
Resolves: #1668895
- Fix HighContrast/symbolic icon mixup
Resolves: #1794045
- Backport introspect API changes
Resolves: #1837413

[3.32.2-16]
- Drop bad upstream patch
Resolves: #1820760

[3.32.2-15]
- Improve performance under load
Resolves: #1820760

gnome-shell-extensions
[3.32.1-11]
- Adjust dash-to-dock for classic backports
Resolves: #1805929
- Fix inconsistent state in window-list prefs dialog
Resolves: #1824362

gnome-terminal
[3.28.3-2]
- Add a manual
- Resolves: #1612688

gsettings-desktop-schemas
[3.32.0-5]
- Recommend DejaVu Sans Mono font as the default monospace font
Resolves: #1656262

gtk3
[3.22.30-6]
- Fix reuse of list box header widgets (#rhbz1843486)

gtk-doc
[1.28-2]
- Backport a patch to fix x86_64/i686 differences in generated documentation
- Resolves: #1634770

gvfs
[1.36.2-10]
- Fix libusb(x) requirements (rhbz#1866332)

[1.36.2-9]
- Improve enumeration performance of smb backend (rhbz#1569868)

LibRaw
[0.19.5-2]
- Backport fix for CVE-2020-15503 from Fedora
Resolves: #1853529

libsoup
[2.62.3-2]
- Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270)

mutter
[3.32.2-48]
- Fix GLX stereo buffer rebase error
Resolves: #1880339

[3.32.2-47]
- Fix screen sharing on wayland
Resolves: #1873963

[3.32.2-46]
- Handle cursor only screen cast frames better
Related: #1837381

[3.32.2-45]
- Handle GPU unplug gracefully
Resolves: #1846191

[3.32.2-44]
- Dont show widow actor until explictly shown
Resolves: #1719937

[3.32.2-43]
- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
Resolves: #1847203

[3.32.2-42]
- Dont pass DMA buffers if they cant be mmap():ed
Related: #1847062

[3.32.2-41]
- Backport is_rendering_hardware_acclerated() API
Related: #1837381

[3.32.2-40]
- Fix DMA buffer memory leak
Related: #1837381

[3.32.2-39]
- Fix incorrect pipewire dependency version
Related: #1837381

[3.32.2-38]
- Backport screen cast and remote desktop improvements
Resolves: #1837381

[3.32.2-37]
- Fix corrupted background after suspend
Resolves: #1828162

nautilus
[3.28.1-14]
- Fix broken tracker query under certain locales (rhbz#1847061)

[3.28.1-13]
- Clear selection if any files dont match the pattern (rhbz#1207179)
- Fix endless content size calculations (rhbz#1566027)
- Honor umask when creating new files (rhbz#1778579)
- Close 'There is no application...' dialog after response (rhbz#1816070)

PackageKit
[1.1.12-6.0.1]
- removed rhel-Vendor.conf.patch

[1.1.12-6]
- Fix documentation links in Vendor.conf
- Resolves: #1837648

[1.1.12-5]
- Do not shutdown the daemon on idle
- Resolves: #1814820

pipewire0.2
[0.2.7-6]
- Fix Conflicts: line
- Remove Recommends: line, its wrong
- Resolves: rhbz#1832347

[0.2.7-5]
- Fix Conflicts: line
- Resolves: rhbz#1832347

[0.2.7-4]
- Add gating file
- Resolves: rhbz#1832347

[0.2.7-3]
- Change source URL
- Resolves: rhbz#1832347

[0.2.7-2]
- Add compat -devel package

[0.2.7-1]
- First version
- Fix bluez5 plugins build

pipewire
[0.3.6-1]
- Update to 0.3.6
- Resolves: rhbz#1832347

[0.3.5-3]
- Rebuild
- Resolves: rhbz#1832347

[0.3.5-2]
- Disable vulkan
- Resolves: rhbz#1832347

[0.3.5-1]
- Update to 0.3.5
- Disable pulse and jack
- Add patch to work with meson 0.49
- Add patch to fix neon compilation
- Resolves: rhbz#1832347

potrace
[1.15-3]
- Fixing build for flatpak (rhbz#1840788)

pygobject3
[3.28.3-2]
- Add lock to avoid two type object wrappers getting generated at
the same time in multi-threaded programs.
Resolves: #1844578

tracker
[2.1.5-2]
- Rebuild to include tracker-devel in CRB
- Resolves: #1758891

vte291
[0.52.4-2]
- Avoid overriding -fno-exceptions
Resolves: #1804719

[0.52.4-1]
- Update to 0.52.4
Resolves: #1804719

webkit2gtk3
[2.28.4-1]
- Update to 2.28.4
- Related: #1817143

[2.28.2-2]
- Related: rhbz#1817143 Properly remove webkit2gtk3-plugin-process-gtk2 package

[2.28.2-1]
- Resolves: rhbz#1817143 Update to 2.28.2

webrtc-audio-processing
[0.3-9]
- Rebuild to address Annobin coverage issues
Resolves: #1704148

xdg-desktop-portal
[1.6.0-2]
- Require pipewire0.2-li

Fixed packages 97

Release	Package	Fixed in
Oracle Linux · 8	dleyna-renderer	0:0.6.0-3.el8
Oracle Linux · 8	frei0r-devel	0:1.6.1-7.el8
Oracle Linux · 8	frei0r-plugins	0:1.6.1-7.el8
Oracle Linux · 8	frei0r-plugins-opencv	0:1.6.1-7.el8
Oracle Linux · 8	gdm	1:3.28.3-34.el8
Oracle Linux · 8	gnome-classic-session	0:3.32.1-11.el8
Oracle Linux · 8	gnome-control-center	0:3.28.2-22.el8
Oracle Linux · 8	gnome-control-center-filesystem	0:3.28.2-22.el8
Oracle Linux · 8	gnome-photos	0:3.28.1-3.el8
Oracle Linux · 8	gnome-photos-tests	0:3.28.1-3.el8
Oracle Linux · 8	gnome-remote-desktop	0:0.1.8-3.el8
Oracle Linux · 8	gnome-session	0:3.28.1-10.0.1.el8
Oracle Linux · 8	gnome-session-wayland-session	0:3.28.1-10.0.1.el8
Oracle Linux · 8	gnome-session-xsession	0:3.28.1-10.0.1.el8
Oracle Linux · 8	gnome-settings-daemon	0:3.32.0-11.el8
Oracle Linux · 8	gnome-shell	0:3.32.2-20.el8
Oracle Linux · 8	gnome-shell-extension-apps-menu	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-auto-move-windows	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-common	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-dash-to-dock	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-desktop-icons	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-disable-screenshield	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-drive-menu	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-horizontal-workspaces	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-launch-new-instance	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-native-window-placement	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-no-hot-corner	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-panel-favorites	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-places-menu	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-screenshot-window-sizer	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-systemMonitor	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-top-icons	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-updates-dialog	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-user-theme	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-window-grouper	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-window-list	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-windowsNavigator	0:3.32.1-11.el8
Oracle Linux · 8	gnome-shell-extension-workspace-indicator	0:3.32.1-11.el8
Oracle Linux · 8	gnome-terminal	0:3.28.3-2.el8
Oracle Linux · 8	gnome-terminal-nautilus	0:3.28.3-2.el8
Oracle Linux · 8	gsettings-desktop-schemas	0:3.32.0-5.el8
Oracle Linux · 8	gsettings-desktop-schemas-devel	0:3.32.0-5.el8
Oracle Linux · 8	gtk-doc	0:1.28-2.el8
Oracle Linux · 8	gtk-update-icon-cache	0:3.22.30-6.el8
Oracle Linux · 8	gtk3	0:3.22.30-6.el8
Oracle Linux · 8	gtk3-devel	0:3.22.30-6.el8
Oracle Linux · 8	gtk3-immodule-xim	0:3.22.30-6.el8
Oracle Linux · 8	gvfs	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-afc	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-afp	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-archive	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-client	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-devel	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-fuse	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-goa	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-gphoto2	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-mtp	0:1.36.2-10.el8
Oracle Linux · 8	gvfs-smb	0:1.36.2-10.el8
Oracle Linux · 8	LibRaw	0:0.19.5-2.el8
Oracle Linux · 8	LibRaw-devel	0:0.19.5-2.el8
Oracle Linux · 8	libsoup	0:2.62.3-2.el8
Oracle Linux · 8	libsoup-devel	0:2.62.3-2.el8
Oracle Linux · 8	mutter	0:3.32.2-48.el8
Oracle Linux · 8	mutter-devel	0:3.32.2-48.el8
Oracle Linux · 8	nautilus	0:3.28.1-14.el8
Oracle Linux · 8	nautilus-devel	0:3.28.1-14.el8
Oracle Linux · 8	nautilus-extensions	0:3.28.1-14.el8
Oracle Linux · 8	PackageKit	0:1.1.12-6.0.1.el8
Oracle Linux · 8	PackageKit-command-not-found	0:1.1.12-6.0.1.el8
Oracle Linux · 8	PackageKit-cron	0:1.1.12-6.0.1.el8
Oracle Linux · 8	PackageKit-glib	0:1.1.12-6.0.1.el8
Oracle Linux · 8	PackageKit-glib-devel	0:1.1.12-6.0.1.el8
Oracle Linux · 8	PackageKit-gstreamer-plugin	0:1.1.12-6.0.1.el8
Oracle Linux · 8	PackageKit-gtk3-module	0:1.1.12-6.0.1.el8
Oracle Linux · 8	pipewire	0:0.3.6-1.el8
Oracle Linux · 8	pipewire-devel	0:0.3.6-1.el8
Oracle Linux · 8	pipewire-doc	0:0.3.6-1.el8
Oracle Linux · 8	pipewire-libs	0:0.3.6-1.el8
Oracle Linux · 8	pipewire-utils	0:0.3.6-1.el8
Oracle Linux · 8	pipewire0.2-devel	0:0.2.7-6.el8
Oracle Linux · 8	pipewire0.2-libs	0:0.2.7-6.el8
Oracle Linux · 8	potrace	0:1.15-3.el8
Oracle Linux · 8	pygobject3-devel	0:3.28.3-2.el8
Oracle Linux · 8	python3-gobject	0:3.28.3-2.el8
Oracle Linux · 8	python3-gobject-base	0:3.28.3-2.el8
Oracle Linux · 8	tracker	0:2.1.5-2.el8
Oracle Linux · 8	tracker-devel	0:2.1.5-2.el8
Oracle Linux · 8	vte-profile	0:0.52.4-2.el8
Oracle Linux · 8	vte291	0:0.52.4-2.el8
Oracle Linux · 8	vte291-devel	0:0.52.4-2.el8
Oracle Linux · 8	webkit2gtk3	0:2.28.4-1.el8
Oracle Linux · 8	webkit2gtk3-devel	0:2.28.4-1.el8
Oracle Linux · 8	webkit2gtk3-jsc	0:2.28.4-1.el8
Oracle Linux · 8	webkit2gtk3-jsc-devel	0:2.28.4-1.el8
Oracle Linux · 8	webrtc-audio-processing	0:0.3-9.el8
Oracle Linux · 8	xdg-desktop-portal	0:1.6.0-2.el8
Oracle Linux · 8	xdg-desktop-portal-gtk	0:1.6.0-1.el8

Vulnerabilities 53

High 8.8

CVE-2019-8720 Exploited

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lea…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Mar 6, 2023
KEV May 23, 2022
High 8.8

CVE-2020-9802 Public exploit

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2019-8625

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1,…

Apple tvOS iTunes for Windows iCloud for Windows Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8710

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windo…

Apple iCloud for Windows qtwebkit-source qtwebkit-opensource-src Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8743

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Pro…

Apple watchOS qtwebkit-source qtwebkit-opensource-src Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8764

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously …

Apple watchOS qtwebkit-source qtwebkit-opensource-src Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8766

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCl…

Apple watchOS iCloud for Windows qtwebkit-source Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed …

Apple macOS iOS qtwebkit-source macOS iOS Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Malici…

Apple Safari iOS qtwebkit-source iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8783

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8808

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8811

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8812

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8813

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2,…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8814

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8815

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8816

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8820 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8823

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8835

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iClou…

Apple iOS and iPadOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2019-8844

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watch…

Apple iOS and iPadOS watchOS tvOS Windows iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2019-8846

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Wind…

Apple iOS and iPadOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2020-10018

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory c…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allo…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Apr 17, 2020
Unscored —

CVE-2020-14391

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly u…

Feb 8, 2021
Unscored —

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_i…

kodi dcraw libraw rawtherapee Debian Ubuntu Azure Linux Alpine

Jul 2, 2020
Unscored —

CVE-2020-3862

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3864

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 fo…

Apple iOS and iPadOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Oct 27, 2020
Unscored —

CVE-2020-3865

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3867

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 1…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3868

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3885

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Saf…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3894

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, …

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3895

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3897

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3899

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3900

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3901

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3902

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-9803

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9805

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9806

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9807

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9843

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9850 Public exploit EPSS 77%

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9862

A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixe…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9893

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9894

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tv…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9895

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9915

An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This is…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9925

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020

Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)

Summary

Fixed packages 97

Vulnerabilities 53

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lea…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1,…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windo…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Pro…

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCl…

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed …

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Malici…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2,…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iClou…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watch…

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Wind…

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory c…

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allo…

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly u…

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_i…

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 fo…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Saf…

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, …

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4…

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4…

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixe…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tv…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This is…

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.…