Red Hat Security AdvisoryRHSA-2020:3978
glib2 and ibus security and bug fix update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glib2-2.56.1-7.el7, ibus-1.5.17-11.el7, ibus-gtk2-1.5.17-11.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glib2-devel-2.56.1-7.el7, glib2-doc-2.56.1-7.el7, glib2-fam-2.56.1-7.el7 +5
- Red Hat Enterprise Linux ComputeNode (v. 7) glib2-2.56.1-7.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glib2-devel-2.56.1-7.el7, glib2-doc-2.56.1-7.el7, glib2-fam-2.56.1-7.el7 +10
- Red Hat Enterprise Linux Server (v. 7) glib2-2.56.1-7.el7, glib2-2.56.1-7.el7.ppc, glib2-devel-2.56.1-7.el7 +10
- Red Hat Enterprise Linux Server Optional (v. 7) glib2-doc-2.56.1-7.el7, glib2-fam-2.56.1-7.el7, glib2-static-2.56.1-7.el7 +6
- Red Hat Enterprise Linux Workstation (v. 7) glib2-2.56.1-7.el7, glib2-devel-2.56.1-7.el7, ibus-1.5.17-11.el7 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) glib2-doc-2.56.1-7.el7, glib2-fam-2.56.1-7.el7, glib2-static-2.56.1-7.el7 +4
Fixes 2 records
Priority MEDIUM 47
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02624 · Published 2019-05-29 · Partial fix CWE-276
Priority LOW 31
A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00365 · Published 2019-11-25 · Partial fix CWE-862
