Read the docs
Red Hat Security Advisory

RHSA-2021:1586

GNOME security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 12 records

TI-2021-11046 CVE-2021-30661 · GHSA-79qq-9x66-f5r5

Use after free in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04491 Published 2021-09-08 Partial fix · 14.5, 14.1 +3 CWE-416
TI-2020-10662 CVE-2020-13584 · GHSA-w3wx-pfgj-qgv3

Use after free in Webkit

Priority MEDIUM 46

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04938 Published 2020-12-03 Partial fix CWE-416
TI-2020-10621 CVE-2020-13543 · GHSA-mqwf-vg2c-5ch3

Use after free in Webkit

Priority MEDIUM 44

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03487 Published 2020-12-03 Partial fix CWE-416
TI-2020-08024 CVE-2020-9951 · GHSA-mv2h-wfgr-5q32

Use after free in Apple Safari

Priority MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02333 Published 2020-10-16 Partial fix · Safari 14.0 CWE-416
TI-2021-01528 CVE-2021-1817 · GHSA-wm9j-fw55-hv9g

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01939 Published 2021-09-08 Partial fix · 14.5, 7.4 +1 CWE-787
TI-2020-08053 CVE-2020-9983 · GHSA-6c43-4qm7-f3r6

Out-of-bounds write in Apple Safari

Priority MEDIUM 42

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02201 Published 2020-10-16 Partial fix · Safari 14.0 CWE-787
TI-2020-08021 CVE-2020-9948 · GHSA-f937-gh67-6x56

Type confusion in Apple Safari

Priority MEDIUM 41

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01694 Published 2020-10-16 Partial fix · Safari 14.0 CWE-843
TI-2019-09750 CVE-2019-13012 · GHSA-4cmr-h54h-4w78

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates…

Priority LOW 39

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, l…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03211 Published 2019-06-28 Partial fix CWE-732
TI-2020-12684 CVE-2020-16125 · GHSA-pc8h-hq5p-vf38

gdm3 would start gnome-initial-setup if it cannot contact accountservice

Priority LOW 34

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an…

CVSS 3.1HIGH 7.2 Physical Low privileges User interaction EPSS 0.01109 Published 2020-11-10 Partial fix · 3.36.4, 3.38.2 CWE-754
TI-2021-01535 CVE-2021-1826 · GHSA-868x-c2ph-qm3r

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 30

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01144 Published 2021-09-08 Partial fix · 14.5, 7.4 +1 CWE-79
TI-2021-01534 CVE-2021-1825 · GHSA-7gx9-m7c6-98gf

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 30

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01364 Published 2021-09-08 Partial fix · 14.5, 14.1 +4 CWE-79