[ALSA-2020:4451] Moderate: GNOME security, bug fix, and enhancement update
Type:
security
Severity:
moderate
Release date:
2021-11-12
Description:
GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406) Security Fix(es): * webkitgtk: Multiple security issues (CVE-2019-8625, CVE-2019-8710, CVE-2019-8720, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925, CVE-2020-10018, CVE-2020-11793) * gnome-settings-daemon: AlmaLinux Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391) * LibRaw: lack of thumbnail size range check can lead to buffer overflow (CVE-2020-15503) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 PackageKit-glib-devel-1.1.12-6.el8.aarch64.rpm 0830fd94c3a73990234b7f3b4b82e696be25e3d8d9b29c7d428de47fad00f9a2
aarch64 libsoup-devel-2.62.3-2.el8.aarch64.rpm 0bd72c362cb5d0256c5f1edfefffe77be2bd746a86a34075a27520e26264caf1
aarch64 PackageKit-gtk3-module-1.1.12-6.el8.aarch64.rpm 0fca9a9c2db731e80f5c3688c1c263e9b45d6d86aa3ed1f61fda33180b839404
aarch64 libsoup-2.62.3-2.el8.aarch64.rpm 1755f74cac2c3d6d41999e0f8499f81734101eb667adaec49960ab39c2650d26
aarch64 pipewire-doc-0.3.6-1.el8.aarch64.rpm 370772758edb63d4ff52361543e1f2a8c6f990129e6db3a0e53d584c6ea6b754
aarch64 vte291-0.52.4-2.el8.aarch64.rpm 3b764538f74a224d7f498ae4deb9a7e43ef7ed274b649d8757fe228559f8fc94
aarch64 pipewire-utils-0.3.6-1.el8.aarch64.rpm 3d67cd5acc8ec777171836b6061f7b6e2d0c2f5082b9f962ed05288bbfd2ae05
aarch64 tracker-devel-2.1.5-2.el8.aarch64.rpm 52ffb9d0b9b8b77eb8d5cda32ee96f044c90b9eea3ee2da491cc0cc038d2e255
aarch64 pipewire0.2-devel-0.2.7-6.el8.aarch64.rpm 5c9130391a38d1fda084b449217f66c18428609f88406330669c171be9ba1ec9
aarch64 tracker-2.1.5-2.el8.aarch64.rpm 5d9601695cd043b57a923ee8ab443cb029e872371b35c5dada5be17049731ee3
aarch64 potrace-1.15-3.el8.aarch64.rpm 66cc9ecea8ceaeb475a3e4a4b216259573514c3cab4c294cf50db1f05292d7ca
aarch64 gnome-remote-desktop-0.1.8-3.el8.aarch64.rpm 68b305a9ab3ca8753551279505762bcbcf6f73b68ba5f0239b69ccef834b664f
aarch64 python3-gobject-base-3.28.3-2.el8.aarch64.rpm 6dcb81cf36a5cdbd090b96e570cd78f654c572874396ab782da1d3e4ffc783b1
aarch64 pipewire-libs-0.3.6-1.el8.aarch64.rpm 6f5628ef6e7788b4f64da2790ecf9052bc93c281809740a14380aff793507ec8
aarch64 frei0r-plugins-1.6.1-7.el8.aarch64.rpm 721d17c636ed8ab2f17b97481115418cd0367bae5fc7c0d1f3c88686ca124238
aarch64 frei0r-plugins-opencv-1.6.1-7.el8.aarch64.rpm 840cd7b77c117197b33d9830bac093a4aa87ea1193c79001bc4e2d3b9c80bc10
aarch64 pipewire-devel-0.3.6-1.el8.aarch64.rpm 95a2fd73d307c0c2940352b0cbfb0507484bfc65d0554619994dde005d257b82
aarch64 pygobject3-devel-3.28.3-2.el8.aarch64.rpm 9645c99c5e913e0c27094af5906e61c615a0c62ece2f1c1eaa0f82c091b299ee
aarch64 pipewire0.2-libs-0.2.7-6.el8.aarch64.rpm 9ab473b8db441e16b0711d8ec834780533a0be51f4c4bae84495cc174b014d29
aarch64 vte-profile-0.52.4-2.el8.aarch64.rpm a998480075869fa594d480a3e95ce7a1c6abcf86c486eb176ec9febcf03a04bf
aarch64 PackageKit-command-not-found-1.1.12-6.el8.aarch64.rpm ab001858d7ced978bb0ffe0aef65ab4d9d1bbc5748970d375e6d609b742a86ab
aarch64 PackageKit-cron-1.1.12-6.el8.aarch64.rpm af9ca9ccf1f4cf16b34a54b678f98ef156f10213071654441547c8ffebe34536
aarch64 python3-gobject-3.28.3-2.el8.aarch64.rpm bc6d30164deb0f66d230a0b371715b1ac2fc00b37113084011e2f2b2619f0a0b
aarch64 xdg-desktop-portal-gtk-1.6.0-1.el8.aarch64.rpm c81fa5c831d5209fe63b1631f35d3168852564c2af9011f153d722146d84c71b
aarch64 frei0r-devel-1.6.1-7.el8.aarch64.rpm cf09a9309861abc21dbd1ab9b802d39f848954d0ef3407f8186bece1c9c27235
aarch64 pipewire-0.3.6-1.el8.aarch64.rpm da035f386b40d5c2ea2919665b766b708e8cb9c4540e51111fdf6202ef5111ad
aarch64 vte291-devel-0.52.4-2.el8.aarch64.rpm dd9727927559e2806a542d4bb95dc6bf8b2cfbbbfc661b7ba680ae815698e800
aarch64 PackageKit-1.1.12-6.el8.aarch64.rpm e2ce9312580921dd17b89ddd36b99b346aeed0b796e592695f65f9c6cd0d299f
aarch64 PackageKit-glib-1.1.12-6.el8.aarch64.rpm ea04f2f9766f3d1d8f503e1ff1a53d73016f8db893b547fe9a4084665b4655b2
aarch64 PackageKit-gstreamer-plugin-1.1.12-6.el8.aarch64.rpm ee1cdd66bfb150c035d7dcbcec0a1cd2c27b105112fd9aef474de4fcf219a2eb
i686 PackageKit-glib-1.1.12-6.el8.i686.rpm 1057f2e954bae4e16b1f0105c3cca7b7dfffd6efd019debe754ca949b17a975b
i686 webrtc-audio-processing-0.3-9.el8.i686.rpm 13ae32827555657b53bee1f15277cf541a26271fe54659d956807f0b30cfb179
i686 potrace-1.15-3.el8.i686.rpm 2c099d4fb72966a1eb469f8d73d7d8484a5e1d18bd49e32b6ee85341a83603b4
i686 frei0r-devel-1.6.1-7.el8.i686.rpm 3a6362e127674f8388ca1f59e404af5c21a09ead709014ff06688fa507e95a78
i686 PackageKit-glib-devel-1.1.12-6.el8.i686.rpm 4b57bbc11f3c2d26a2560c817069eadac76a0053415bdf4d3125111bccb7444a
i686 frei0r-plugins-1.6.1-7.el8.i686.rpm 53d4dff33f1e580ed9e62afced0b0ffb1430b03cc3ac409b1b2e7601aadede96
i686 gvfs-1.36.2-10.el8.i686.rpm 56edaa92a90559b394b419a217526341a6a8c48c48fcd1b9b7a665c88f1b12ac
i686 tracker-devel-2.1.5-2.el8.i686.rpm 5ab9bf049051fab0b7801ca8ce3ff322f24ee8d835d519b416784df753b8a950
i686 tracker-2.1.5-2.el8.i686.rpm 5bf729baddaa21571a8136afee8ddd7a81cb0979d4c3431728efea853bfd5c89
i686 pygobject3-devel-3.28.3-2.el8.i686.rpm 5ea825b65a94b23b698cc1fe5a916d7a3fc638e73428ef76a63e588b21aba2e2
i686 python3-gobject-3.28.3-2.el8.i686.rpm 5eff18deef0af5280dcf90b7602f21225a8c5d662d9bdfec6bd20bf5b59b0edd
i686 nautilus-3.28.1-14.el8.i686.rpm 644e351c6df077b8f8a25caa19541b3c6361a89387c76174a23155d3839c76d7
i686 libsoup-devel-2.62.3-2.el8.i686.rpm 867995aaa5b3f60fb2d885a7d9a42f677b6e761839ce50edc1e9b444fbcb2dad
i686 vte291-0.52.4-2.el8.i686.rpm 8a39348ac8da81f35e16fb722a9467c5fa86f1a8a3b094f4240e6c5acca5e106
i686 LibRaw-devel-0.19.5-2.el8.i686.rpm 90d4871c0096b43047fdf9c4dafc281a00121b628fb57719076e2c14e5ce7148
i686 pipewire0.2-devel-0.2.7-6.el8.i686.rpm 97775d0f7d30bd8bfeb16a6656fb19e9e40406c4f3cf502f15bc44736b4c92b3
i686 PackageKit-gtk3-module-1.1.12-6.el8.i686.rpm 97fe530cc462a8248946b77d9944c597cdac79f4d24b19c630c03c483182f196
i686 pipewire-0.3.6-1.el8.i686.rpm a1c19627e83223daac75c2c005a96e48f5c5f90c53bdc1e0a20a56f9909b2091
i686 nautilus-devel-3.28.1-14.el8.i686.rpm a8a76a320821f264bb91f6d6b003e9c7887d046d1566197386a777e61c2e750f
i686 pipewire-devel-0.3.6-1.el8.i686.rpm c3a0a5e9b1fa12d3f68b164928e58e713d4044af936811d32076e4e53c501f44
i686 pipewire-libs-0.3.6-1.el8.i686.rpm d90363ee8b9bf1ecc33597e0fa560d4c501ff93357fd8ba0250c83e1f3f91e03
i686 python3-gobject-base-3.28.3-2.el8.i686.rpm e2e7ef74eb6311ae6c45b7ec130f5ffde9941d565b32c24e4c98ff0c526555f6
i686 pipewire0.2-libs-0.2.7-6.el8.i686.rpm e3d76cfc1ecf87c818ee6d47e8f63823538d7a645fde69ef12de989afe20c6f9
i686 vte291-devel-0.52.4-2.el8.i686.rpm ed06b6eed221c6c54449f4a212b38a612e08c6f7ddc7f553cca9abd9f5eb4450
i686 mutter-devel-3.32.2-48.el8.i686.rpm fa63acee53da165ebf03b5fcade07284410720b41166bb258ec62b705c017fd2
ppc64le xdg-desktop-portal-gtk-1.6.0-1.el8.ppc64le.rpm 1519a59ed02fd82b0378b309b8aea9a23e9745d05cd873f9fcabe3e9af1ef782
ppc64le dleyna-renderer-0.6.0-3.el8.ppc64le.rpm 174a623d54da376abb4b9215d83d4799d4cbdf8d253d1df20f3a0c8e5562fb51
ppc64le pipewire-libs-0.3.6-1.el8.ppc64le.rpm 21c05804b1d2cda18714312a405762ec713bf1c0babe472be0d63258b826154e
ppc64le python3-gobject-3.28.3-2.el8.ppc64le.rpm 52424d90a87248e2d0297c3997f54b610ec1c26a54cdb3db9c06a3755ddf0d64
ppc64le PackageKit-glib-devel-1.1.12-6.el8.ppc64le.rpm 5295f71d22b86ebeb4789af3ccdc5003f96a9566f52100a7bd42e41254bab0ed
ppc64le pipewire0.2-libs-0.2.7-6.el8.ppc64le.rpm 52f9e5878262f38960f6333ad1f7cc7b60db4c72ebdae18897f8bf48714a3e1c
ppc64le vte-profile-0.52.4-2.el8.ppc64le.rpm 5ebbcecc3ea7192f401e71226a5a65eaa7946073b2f2e6578697db4b540ab669
ppc64le PackageKit-gstreamer-plugin-1.1.12-6.el8.ppc64le.rpm 6527fac69b44d053f36a1a87f94c9a8d327b8d9d2d6418f80f282ce1a0994e4c
ppc64le PackageKit-command-not-found-1.1.12-6.el8.ppc64le.rpm 6581d5c16c3eb450c35ea3c465aae0b15468fb7c3382875a706861581c127923
ppc64le pipewire0.2-devel-0.2.7-6.el8.ppc64le.rpm 6920b6777d0a30556de09d25d43646af90150cc5b9df7ccb494dae5e8280f8e5
ppc64le tracker-2.1.5-2.el8.ppc64le.rpm 6a39f8facd86ebc6755076b22be4c253c97643d03a0a924ee11e01376138c276
ppc64le PackageKit-glib-1.1.12-6.el8.ppc64le.rpm 6ac206d6811de1413b0eb33f791f271f202dbb8c86da60598d4404cf2f508aae
ppc64le frei0r-devel-1.6.1-7.el8.ppc64le.rpm 6db71a05b6acda96d405e745ca066cef232fe27ec51ec813a7eec0d8f6f37b83
ppc64le vte291-0.52.4-2.el8.ppc64le.rpm 7c29a77628ead99c9358b5b13f82ca69b6ec7a2097f559494b1df765683bfab2
ppc64le python3-gobject-base-3.28.3-2.el8.ppc64le.rpm 84c6977885c07c2a9d32e9e04718f15b5db394502f8373c8f2ed9a65aa1a7810
ppc64le frei0r-plugins-opencv-1.6.1-7.el8.ppc64le.rpm 8cd628107e3dea2ac2db7a7ccddd7ca5ea2c9a3a7f8c07e934dbe0e85f17992e
ppc64le vte291-devel-0.52.4-2.el8.ppc64le.rpm 9047062c0c39e203e4824bc9d376bb7c129450b708ba40f2dc30af20ae03f02f
ppc64le PackageKit-1.1.12-6.el8.ppc64le.rpm a71798a1d21fd14e3873f00c41c8e91e3405d33cb57ae1f6f4f0ec78025e570f
ppc64le potrace-1.15-3.el8.ppc64le.rpm ac102f1bd55ba839406771b4566f9ebe0abd867804d18969e138bab6add36f45
ppc64le pipewire-0.3.6-1.el8.ppc64le.rpm b0ebc4c536212deddbae0c5196d526f50c3f9b00cdc6c784615336e6ab599bf0
ppc64le gnome-remote-desktop-0.1.8-3.el8.ppc64le.rpm b9e5fd315615c0bf64fafbc76b58f1a929b9cffdd34af21aec5593ccccf0a1bb
ppc64le pygobject3-devel-3.28.3-2.el8.ppc64le.rpm bc02468f5ba6d096c836a88b8fa56dafaa568c43d6935a516ad93a9bc1b8d7bc
ppc64le frei0r-plugins-1.6.1-7.el8.ppc64le.rpm c09bb0f5272a4681859f7fbf6bb98bb6fb9a66d99ee3214fef79f9e90d35521b
ppc64le pipewire-devel-0.3.6-1.el8.ppc64le.rpm d09485b0a4d4748294851b48e05e45db10e20189cfa57f24dc03cf852b67d9ca
ppc64le tracker-devel-2.1.5-2.el8.ppc64le.rpm d852c5bf8e1f800232ac99a2eb439d2d3753274a1c70621f171b2c348508c2c8
ppc64le libsoup-devel-2.62.3-2.el8.ppc64le.rpm e1b2e62e81eb6f8b10dcecfb6bd3a537f0b9aeac71423e0d651b7a16ef66d628
ppc64le pipewire-doc-0.3.6-1.el8.ppc64le.rpm e6fa5ecced466b1888c99ca0e4b51e580f00b157d2fab2ad83332bd6261cf7dd
ppc64le PackageKit-gtk3-module-1.1.12-6.el8.ppc64le.rpm ebe51e2f96fe155dc8889dea3f4acf2e35ce11586761aa40c25304b08ff38ed5
ppc64le pipewire-utils-0.3.6-1.el8.ppc64le.rpm efa00dbba4f6f4e98e2c67334c3a360f0fbe4d0f7476e016866260399ecfb15c
ppc64le PackageKit-cron-1.1.12-6.el8.ppc64le.rpm fa9cce89210ac1c52441b47ad7feb5e4145ea8c1ebd29b70f4f9cc5afc5dcaaf
x86_64 python3-gobject-3.28.3-2.el8.x86_64.rpm 03b27b468de041dede27ba2eb4ca50c7b0ca32c4c134a3f930ed92f2c5ab56d0
x86_64 PackageKit-glib-devel-1.1.12-6.el8.x86_64.rpm 08a650275cafbf2cc16583ea4224237a8acee8523568beaf3a2872e96477305b
x86_64 pipewire-devel-0.3.6-1.el8.x86_64.rpm 0de0accbb6f1faa4d02cabef3c0299de41fa7404a6a9618e8dfc7eb48ac89062
x86_64 nautilus-devel-3.28.1-14.el8.x86_64.rpm 19b128049340fdbb3dd031c286ea316ade9ea5e915081cca4271520e07272d27
x86_64 pipewire-0.3.6-1.el8.x86_64.rpm 206c5afb74e9569142b1a36c94b9255c5c8ce1eb74fedb64b2913e3d83381fb1
x86_64 frei0r-plugins-1.6.1-7.el8.x86_64.rpm 2616609eb43ef25e6aec2ffbc8b06516ddc58b281ad045180daa107e09ccc71f
x86_64 frei0r-devel-1.6.1-7.el8.x86_64.rpm 3711d285276197877314e54ad587d889c64e115e3ac03472f80a75b7bcb09833
x86_64 gnome-remote-desktop-0.1.8-3.el8.x86_64.rpm 41d86856d791f30a5ccd8f71abddf0ff0651baf8dc79e9c064c62a12194417a3
x86_64 PackageKit-gstreamer-plugin-1.1.12-6.el8.x86_64.rpm 47fb54f882284912c621680d252d7bef0882403652f2620e81e93882faf758b4
x86_64 pipewire0.2-devel-0.2.7-6.el8.x86_64.rpm 4eb328c81e326e2d655f0d074b524b030eea7c306dccdf5deb92d62d701c5e71
x86_64 tracker-devel-2.1.5-2.el8.x86_64.rpm 4f29b02043f3d6b0dd448c4ee22f9b08360f3302f3180afd657f5e6292d6bfab
x86_64 vte291-devel-0.52.4-2.el8.x86_64.rpm 50fb00fb27a1db6316a3aca649b578280ead2e222f65ea0a04a850a00d7013a5
x86_64 webrtc-audio-processing-0.3-9.el8.x86_64.rpm 5bf217396a9d0d7f30c777aff699e7d0e9bc289a4529875a76b5c246c2bf1047
x86_64 PackageKit-glib-1.1.12-6.el8.x86_64.rpm 5e5b4dd4d596d1e3310c386b46122e39fcb545cd1de00ae936a7ef6b81af71db
x86_64 PackageKit-cron-1.1.12-6.el8.x86_64.rpm 5fa32da957f51e3eec425d81766d7d4bcaa3a4b930aef568db4d252b6eec5c58
x86_64 xdg-desktop-portal-gtk-1.6.0-1.el8.x86_64.rpm 724202fd0c2d8db8d002a48ab1f2c685d22062c04ec2b36d6b55d4062d412701
x86_64 PackageKit-1.1.12-6.el8.x86_64.rpm 731ac77afc375e6e54f96dc076a1adf198a1dc2cce46aa42e84ecbee68a28c29
x86_64 dleyna-renderer-0.6.0-3.el8.x86_64.rpm 749d9e065a199051bb6be076dfe7d386d200cdcad24b1e1000058f9460931dcd
x86_64 mutter-devel-3.32.2-48.el8.x86_64.rpm 79e9c75d4ec4c54ca46f1e3dd3daa934e69bd53c81350f12a9de9d911f6277df
x86_64 vte-profile-0.52.4-2.el8.x86_64.rpm 8e727c938ef362fabd028b214e293a52672ebb2b8646174f03d1ff29d7ae80ff
x86_64 potrace-1.15-3.el8.x86_64.rpm 9cfc7875fbe4d66cea5eb1f9da9db7e50b8ec7a0bc3fbfaddd6f9d8e84f8dce7
x86_64 pipewire-libs-0.3.6-1.el8.x86_64.rpm 9e94cff071fc8c5647415cc7ddcabd40780f265b14ef3fbb114d47a972554082
x86_64 PackageKit-command-not-found-1.1.12-6.el8.x86_64.rpm a33aeea4f3c21c76e773e8823543e00890a912694f302c3eafa67c896c2b5cad
x86_64 vte291-0.52.4-2.el8.x86_64.rpm aba4bda5438f2dd9aeecf451be05ef5e66c17a9aea28599f2145aae0a5d8ce4a
x86_64 pipewire0.2-libs-0.2.7-6.el8.x86_64.rpm b4da9ef8ba51379486319b39dd6e8ba7cbac0015e1676afaff8875182c34feec
x86_64 LibRaw-devel-0.19.5-2.el8.x86_64.rpm b5252c1e66a270971493b70fd37337e8bcdbee3c4b91b797ebf951c79ad39152
x86_64 pygobject3-devel-3.28.3-2.el8.x86_64.rpm c0856dead00588db1159f674bd205de9abefca865bf60a15ed5e71d029c0ae30
x86_64 libsoup-devel-2.62.3-2.el8.x86_64.rpm d9008e513cfe4c8a1eb56fa8b2111ef9718ebba57ab964b8633e35ecbc1291c1
x86_64 PackageKit-gtk3-module-1.1.12-6.el8.x86_64.rpm d9f07b0991777e112634d4d0910111cdb747488043a98bf0709e48f2edbc5d5d
x86_64 pipewire-utils-0.3.6-1.el8.x86_64.rpm dfaf8e94087fae4bf1341c844ac88f6b981a8e09ee8ab2984096cbfb012cff37
x86_64 tracker-2.1.5-2.el8.x86_64.rpm e09a48ad98bf868482dec90415027ffac2e05a2c2b1c93ea9bf5d5b890bca50a
x86_64 gtk-doc-1.28-2.el8.x86_64.rpm e66ee49f9ee1ac00dcfb7c9445a2a2816477f28c625ac010e249aebc55921456
x86_64 pipewire-doc-0.3.6-1.el8.x86_64.rpm f40dfdbb1b38dd616e98f835088d54b8d1af6a613c14293c997a62696207d7fe
x86_64 frei0r-plugins-opencv-1.6.1-7.el8.x86_64.rpm f80dd6990585d47a7ea5790416134d1da7ef7f667a6dffd541f079a642ff1420
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.