RLSA-2021:1586

Dashboard / Vulnerabilities / RLSA-2021:1586

RLSA-2021:1586

Summary: Moderate: GNOME security, bug fix, and enhancement update

Details: GNOME is the default desktop environment of Rocky Linux. The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304) Security Fix(es): * webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951) * webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584) * glib2: insecure permissions for files and directories (CVE-2019-13012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

References: https://errata.rockylinux.org/RLSA-2021:1586, https://bugzilla.redhat.com/show_bug.cgi?id=1152037, https://bugzilla.redhat.com/show_bug.cgi?id=1464902, https://bugzilla.redhat.com/show_bug.cgi?id=1671761, https://bugzilla.redhat.com/show_bug.cgi?id=1700002, https://bugzilla.redhat.com/show_bug.cgi?id=1705392, https://bugzilla.redhat.com/show_bug.cgi?id=1728632, https://bugzilla.redhat.com/show_bug.cgi?id=1728896, https://bugzilla.redhat.com/show_bug.cgi?id=1765627, https://bugzilla.redhat.com/show_bug.cgi?id=1786496, https://bugzilla.redhat.com/show_bug.cgi?id=1796916, https://bugzilla.redhat.com/show_bug.cgi?id=1802105, https://bugzilla.redhat.com/show_bug.cgi?id=1833787, https://bugzilla.redhat.com/show_bug.cgi?id=1842229, https://bugzilla.redhat.com/show_bug.cgi?id=1845660, https://bugzilla.redhat.com/show_bug.cgi?id=1846376, https://bugzilla.redhat.com/show_bug.cgi?id=1854290, https://bugzilla.redhat.com/show_bug.cgi?id=1860946, https://bugzilla.redhat.com/show_bug.cgi?id=1861357, https://bugzilla.redhat.com/show_bug.cgi?id=1861769, https://bugzilla.redhat.com/show_bug.cgi?id=1865718, https://bugzilla.redhat.com/show_bug.cgi?id=1870837, https://bugzilla.redhat.com/show_bug.cgi?id=1871041, https://bugzilla.redhat.com/show_bug.cgi?id=1876291, https://bugzilla.redhat.com/show_bug.cgi?id=1881312, https://bugzilla.redhat.com/show_bug.cgi?id=1883304, https://bugzilla.redhat.com/show_bug.cgi?id=1883868, https://bugzilla.redhat.com/show_bug.cgi?id=1886822, https://bugzilla.redhat.com/show_bug.cgi?id=1888407, https://bugzilla.redhat.com/show_bug.cgi?id=1889411, https://bugzilla.redhat.com/show_bug.cgi?id=1889528, https://bugzilla.redhat.com/show_bug.cgi?id=1901212, https://bugzilla.redhat.com/show_bug.cgi?id=1901214, https://bugzilla.redhat.com/show_bug.cgi?id=1901216, https://bugzilla.redhat.com/show_bug.cgi?id=1901221, https://bugzilla.redhat.com/show_bug.cgi?id=1903043, https://bugzilla.redhat.com/show_bug.cgi?id=1903568, https://bugzilla.redhat.com/show_bug.cgi?id=1906499, https://bugzilla.redhat.com/show_bug.cgi?id=1918391, https://bugzilla.redhat.com/show_bug.cgi?id=1919429, https://bugzilla.redhat.com/show_bug.cgi?id=1919432, https://bugzilla.redhat.com/show_bug.cgi?id=1919435, https://bugzilla.redhat.com/show_bug.cgi?id=1919467, https://bugzilla.redhat.com/show_bug.cgi?id=1921151, https://bugzilla.redhat.com/show_bug.cgi?id=837035