Red Hat Security Advisory

RHSA-2021:4381

GNOME security, bug fix, and enhancement update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) LibRaw-devel-0.19.5-3.el8
Red Hat Enterprise Linux AppStream (v. 8) LibRaw-0.19.5-3.el8, gnome-autoar-0.2.3-2.el8, webkit2gtk3-2.32.3-2.el8 +3

Fixes 29 records

TI-2021-01573 CVE-2021-1871 · GHSA-hvr3-8pvc-577j

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07002 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2021-01572 CVE-2021-1870 · GHSA-f8fh-g8mv-p7hh

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0771 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2021-11050 CVE-2021-30665 · GHSA-fgq5-6x94-h566

Out-of-bounds write in Apple macOS

CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03706 Published 2021-09-08 Partial fix · 11.3, 14.5 +3 CWE-787

TI-2021-11048 CVE-2021-30663 · GHSA-5g93-pf3w-6f59

Integer overflow in Apple macOS

CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03521 Published 2021-09-08 Partial fix · 11.3, 14.5 +3 CWE-190

TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843

TI-2021-04851 CVE-2021-21806 · GHSA-x2v5-56r3-vrw9

Use after free in Webkit

MEDIUM 43

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02835 Published 2021-07-08 Partial fix CWE-416

TI-2021-04825 CVE-2021-21779 · GHSA-fvf7-58x3-4492

Use after free in Webkit

MEDIUM 43

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02924 Published 2021-07-08 Partial fix CWE-416

TI-2021-01551 CVE-2021-1844 · GHSA-7j8f-prmh-229c

Out-of-bounds write in Apple macOS

MEDIUM 43

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02377 Published 2021-04-02 Partial fix · 11.2, 14.4 +2 CWE-787

TI-2021-11176 CVE-2021-30799 · GHSA-rh3c-99q9-27v6

Out-of-bounds write in Apple Security Update - Catalina

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02263 Published 2021-09-08 Partial fix · 2021, 14.7 +1 CWE-787

TI-2021-11174 CVE-2021-30797 · GHSA-q239-wm45-8mwc

Apple iOS: Processing maliciously crafted web content may lead to code execution

MEDIUM 42

This issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01867 Published 2021-09-08 Partial fix · 14.7, 11.5 +2

TI-2021-11172 CVE-2021-30795 · GHSA-mq98-f72q-hfx8

Use after free in Apple iOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02217 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-416

TI-2021-11115 CVE-2021-30734 · GHSA-6h5w-63g9-w5m9

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02023 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-787

TI-2020-10636 CVE-2020-13558 · GHSA-qhvm-2jxc-mqxw

Use after free in Webkit

MEDIUM 42

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01857 Published 2021-03-03 Partial fix CWE-416

TI-2021-11136 CVE-2021-30758 · GHSA-7qcx-m2gc-9659

Type confusion in Apple iOS

MEDIUM 41

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01658 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-843

TI-2021-11128 CVE-2021-30749 · GHSA-7477-545w-5xj3

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01677 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-787

TI-2021-01501 CVE-2021-1788 · GHSA-7xrr-c599-c43j

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01676 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-416

TI-2020-15221 CVE-2020-24870 · GHSA-p736-65cp-9pj8

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

MEDIUM 41

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01625 Published 2021-06-02 Partial fix CWE-787

TI-2021-04821 CVE-2021-21775 · GHSA-ghh6-x87m-6qjh

Use after free in Webkit

LOW 37

A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01274 Published 2021-07-07 Partial fix CWE-416

TI-2020-16974 CVE-2020-27918 · GHSA-w4gf-42f5-463m

Use after free in Apple watchOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01425 Published 2020-12-08 Partial fix · 7.1, 14.2 +4 CWE-416

TI-2021-01513 CVE-2021-1801 · GHSA-99vx-wqpw-hqrq

Apple iOS and iPadOS: Maliciously crafted web content may violate iframe sandboxing policy

LOW 32

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01515 Published 2021-04-02 Partial fix · 14.4, 11.2 +1

TI-2021-01511 CVE-2021-1799 · GHSA-94v4-v74g-2hx6

Apple iOS and iPadOS: A malicious website may be able to access restricted ports on…

LOW 32

A port redirection issue was addressed with additional port validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01763 Published 2021-04-02 Partial fix · 14.4, 11.2 +2

TI-2021-01478 CVE-2021-1765 · GHSA-872w-fg9q-jgjx

Apple macOS: Maliciously crafted web content may violate iframe sandboxing policy

LOW 32

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01413 Published 2021-04-02 Partial fix · 11.2

TI-2021-11125 CVE-2021-30744 · GHSA-6gqw-9w99-v9gq

Cross-site scripting in Apple iOS and iPadOS

LOW 30

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01155 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-79

TI-2021-11073 CVE-2021-30689 · GHSA-2mm2-42pq-5qmv

Cross-site scripting in Apple iOS and iPadOS

LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.011 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-79

TI-2021-11066 CVE-2021-30682 · GHSA-w85p-6q9m-866x

Apple iOS and iPadOS: A malicious application may be able to leak sensitive user…

LOW 28

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01666 Published 2021-09-08 Partial fix · 14.6, 11.4 +2

TI-2021-11103 CVE-2021-30720 · GHSA-f2jw-679f-6726

Improper authentication in Apple iOS and iPadOS

LOW 27

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01372 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-287

TI-2020-18561 CVE-2020-36241 · GHSA-vm56-hj47-795x

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus…

LOW 26

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00646 Published 2021-02-05 Fixed CWE-22

TI-2021-09720 CVE-2021-28650 · GHSA-7ppq-qp29-rvgj

autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus…

LOW 25

autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink i…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00528 Published 2021-03-17 Fixed CWE-59

TI-2020-17803 CVE-2020-29623 · GHSA-9723-8v87-36qm

"Clear History and Website Data" did not clear the history.

LOW 16

"Clear History and Website Data" did not clear the history.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.0036 Published 2021-04-02 Partial fix · 14.3, 11.1