Red Hat Security Advisory

RHSA-2020:1766

GNOME security, bug fix, and enhancement update

Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) LibRaw-0.19.5-1.el8, LibRaw-devel-0.19.5-1.el8, accountsservice-devel-0.6.50-8.el8 +14
Red Hat Enterprise Linux AppStream (v. 8) LibRaw-0.19.5-1.el8, accountsservice-0.6.50-8.el8, accountsservice-libs-0.6.50-8.el8 +47
Red Hat Enterprise Linux BaseOS (v. 8) gsettings-desktop-schemas-3.32.0-4.el8, libxslt-1.1.32-4.el8, mozjs52-52.9.0-2.el8 +1

TI-2018-14394 CVE-2018-20337 · GHSA-c9h6-p6mv-6rr7

MEDIUM 42

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02145 Published 2018-12-21 Fixed CWE-787

TI-2019-09291 CVE-2019-12448 · GHSA-x42r-3m27-mhv7

LOW 39

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01757 Published 2019-05-29 Partial fix CWE-362

TI-2019-09290 CVE-2019-12447 · GHSA-4hjh-mpfm-qhm5

LOW 36

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.01806 Published 2019-05-29 Partial fix

TI-2019-09292 CVE-2019-12449 · GHSA-cvf3-3jj2-mv9f

LOW 29

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01815 Published 2019-05-29 Partial fix CWE-755

TI-2019-02837 CVE-2019-3825 · GHSA-pfhm-wwqj-c296

LOW 29

A vulnerability was discovered in gdm before 3.31.4.

CVSS 3.0MEDIUM 6.4 Physical No auth No interaction EPSS 0.00508 Published 2019-02-06 Partial fix CWE-287