ALSA-2021:1586

Dashboard / Vulnerabilities / ALSA-2021:1586

ALSA-2021:1586

Summary: Moderate: GNOME security, bug fix, and enhancement update

Details: GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304) Security Fix(es): * webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951) * webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584) * glib2: insecure permissions for files and directories (CVE-2019-13012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References: https://errata.almalinux.org/8/ALSA-2021-1586.html, https://vulners.com/cve/CVE-2019-13012, https://vulners.com/cve/CVE-2020-13543, https://vulners.com/cve/CVE-2020-13584, https://vulners.com/cve/CVE-2020-16125, https://vulners.com/cve/CVE-2020-9948, https://vulners.com/cve/CVE-2020-9951, https://vulners.com/cve/CVE-2020-9983, https://vulners.com/cve/CVE-2021-1817, https://vulners.com/cve/CVE-2021-1820, https://vulners.com/cve/CVE-2021-1825, https://vulners.com/cve/CVE-2021-1826, https://vulners.com/cve/CVE-2021-30661