RLSA-2020:4451 — Moderate: GNOME security, bug fix, and enhancement update

Summary

GNOME is the default desktop environment of Rocky Linux.

The following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406)

Security Fix(es):

* webkitgtk: Multiple security issues (CVE-2019-8625, CVE-2019-8710, CVE-2019-8720, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925, CVE-2020-10018, CVE-2020-11793)

* gnome-settings-daemon: Rocky Enterprise Software Foundation Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391)

* LibRaw: lack of thumbnail size range check can lead to buffer overflow (CVE-2020-15503)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Fixed packages 18

Release	Package	Fixed in
Rocky Linux · 8	dleyna-renderer	0:0.6.0-3.el8
Rocky Linux · 8	frei0r-plugins	0:1.6.1-7.el8
Rocky Linux · 8	gnome-remote-desktop	0:0.1.8-3.el8
Rocky Linux · 8	gnome-session	0:3.28.1-10.el8
Rocky Linux · 8	gsettings-desktop-schemas	0:3.32.0-5.el8
Rocky Linux · 8	gtk3	0:3.22.30-6.el8
Rocky Linux · 8	LibRaw	0:0.19.5-2.el8
Rocky Linux · 8	libsoup	0:2.62.3-2.el8
Rocky Linux · 8	PackageKit	0:1.1.12-6.el8
Rocky Linux · 8	PackageKit	0:1.1.12-6.el8.0.2
Rocky Linux · 8	pipewire	0:0.3.6-1.el8
Rocky Linux · 8	pipewire0.2	0:0.2.7-6.el8
Rocky Linux · 8	potrace	0:1.15-3.el8
Rocky Linux · 8	pygobject3	0:3.28.3-2.el8
Rocky Linux · 8	tracker	0:2.1.5-2.el8
Rocky Linux · 8	vte291	0:0.52.4-2.el8
Rocky Linux · 8	webrtc-audio-processing	0:0.3-9.el8
Rocky Linux · 8	xdg-desktop-portal-gtk	0:1.6.0-1.el8

Vulnerabilities 57

High 8.8

CVE-2019-8720 Exploited

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lea…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Mar 6, 2023
KEV May 23, 2022
High 8.8

CVE-2021-30666 Exploited

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing mali…

Apple iOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu Alpine

Sep 8, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-30761 Exploited EPSS 11%

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing m…

Apple iOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu Alpine

Sep 8, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-30762 Exploited EPSS 11%

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing mal…

Apple iOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu Alpine

Sep 8, 2021
KEV Nov 3, 2021
High 8.8

CVE-2020-9802 Public exploit

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2019-8625

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1,…

Apple tvOS iTunes for Windows iCloud for Windows Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8710

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windo…

Apple iCloud for Windows qtwebkit-source qtwebkit-opensource-src Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8743

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Pro…

Apple watchOS qtwebkit-source qtwebkit-opensource-src Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8764

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously …

Apple watchOS qtwebkit-source qtwebkit-opensource-src Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8766

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCl…

Apple watchOS iCloud for Windows qtwebkit-source Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed …

Apple macOS iOS qtwebkit-source macOS iOS Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Malici…

Apple Safari iOS qtwebkit-source iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8783

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8808

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8811

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8812

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8813

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2,…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8814

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8815

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8816

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8820 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8823

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8835

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iClou…

Apple iOS and iPadOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2019-8844

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watch…

Apple iOS and iPadOS watchOS tvOS Windows iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2019-8846

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Wind…

Apple iOS and iPadOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020
Unscored —

CVE-2020-10018

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory c…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allo…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Apr 17, 2020
Unscored —

CVE-2020-14391

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly u…

Feb 8, 2021
Unscored —

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_i…

kodi dcraw libraw rawtherapee Debian Ubuntu Azure Linux Alpine

Jul 2, 2020
Unscored —

CVE-2020-3862

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3864

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 fo…

Apple iOS and iPadOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Oct 27, 2020
Unscored —

CVE-2020-3865

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3867

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 1…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3868

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3885

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Saf…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3894

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, …

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3895

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3897

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3899

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3900

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3901

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-3902

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Apr 1, 2020
Unscored —

CVE-2020-9803

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9805

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9806

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9807

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9843

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9850 Public exploit EPSS 77%

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
Unscored —

CVE-2020-9862

A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixe…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9893

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9894

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tv…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9895

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9915

An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This is…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9925

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020
Unscored —

CVE-2020-9952

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Oct 16, 2020

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=1207179
report
https://bugzilla.redhat.com/show_bug.cgi?id=1566027
report
https://bugzilla.redhat.com/show_bug.cgi?id=1569868
report
https://bugzilla.redhat.com/show_bug.cgi?id=1652178
report
https://bugzilla.redhat.com/show_bug.cgi?id=1656262
report
https://bugzilla.redhat.com/show_bug.cgi?id=1668895
report
https://bugzilla.redhat.com/show_bug.cgi?id=1692536
report
https://bugzilla.redhat.com/show_bug.cgi?id=1706008
report
https://bugzilla.redhat.com/show_bug.cgi?id=1706076
report
https://bugzilla.redhat.com/show_bug.cgi?id=1715845
report
https://bugzilla.redhat.com/show_bug.cgi?id=1719937
report
https://bugzilla.redhat.com/show_bug.cgi?id=1758891
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775345
report
https://bugzilla.redhat.com/show_bug.cgi?id=1778579
report
https://bugzilla.redhat.com/show_bug.cgi?id=1779691
report
https://bugzilla.redhat.com/show_bug.cgi?id=1794045
report
https://bugzilla.redhat.com/show_bug.cgi?id=1804719
report
https://bugzilla.redhat.com/show_bug.cgi?id=1805929
report
https://bugzilla.redhat.com/show_bug.cgi?id=1811721
report
https://bugzilla.redhat.com/show_bug.cgi?id=1814820
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816070
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816678
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816684
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816686
report
https://bugzilla.redhat.com/show_bug.cgi?id=1817143
report
https://bugzilla.redhat.com/show_bug.cgi?id=1820759
report
https://bugzilla.redhat.com/show_bug.cgi?id=1820760
report
https://bugzilla.redhat.com/show_bug.cgi?id=1824362
report
https://bugzilla.redhat.com/show_bug.cgi?id=1827030
report
https://bugzilla.redhat.com/show_bug.cgi?id=1829369
report
https://bugzilla.redhat.com/show_bug.cgi?id=1832347
report
https://bugzilla.redhat.com/show_bug.cgi?id=1833158
report
https://bugzilla.redhat.com/show_bug.cgi?id=1837381
report
https://bugzilla.redhat.com/show_bug.cgi?id=1837406
report
https://bugzilla.redhat.com/show_bug.cgi?id=1837413
report
https://bugzilla.redhat.com/show_bug.cgi?id=1837648
report
https://bugzilla.redhat.com/show_bug.cgi?id=1840080
report
https://bugzilla.redhat.com/show_bug.cgi?id=1840788
report
https://bugzilla.redhat.com/show_bug.cgi?id=1843486

Moderate: GNOME security, bug fix, and enhancement update

Summary

Fixed packages 18

Vulnerabilities 57

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lea…

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing mali…

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing m…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing mal…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1,…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windo…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Pro…

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCl…

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed …

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Malici…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2,…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iClou…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watch…

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Wind…

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory c…

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allo…

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly u…

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_i…

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 fo…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Saf…

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, …

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4…

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4,…

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tv…

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4…

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5…

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixe…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tv…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …

An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This is…

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.…

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0…

References