ALSA-2021:4381 - Moderate: GNOME security, bug fix, and enhancement update
Summary
ALSA-2021:4381: Moderate: GNOME security, bug fix, and enhancement update. Affects LibRaw versions < 0.19.5-3.el8. Fixed in 0.19.5-3.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GNOME is the default desktop environment of AlmaLinux. It provides a user-friendly and visually appealing interface for Linux systems. The GNOME packages mentioned in this update include gdm and webkit2gtk3. GDM is the GNOME Display Manager, responsible for managing user logins and sessions. Webkit2gtk3 is a web content engine used by GNOME applications to render web pages.
Vulnerability Detail
The update addresses multiple security vulnerabilities in the GNOME packages. These vulnerabilities include use-after-free issues, memory corruptions, logic issues, and type confusion. Exploiting these vulnerabilities could lead to arbitrary code execution, information leaks, universal cross-site scripting attacks, and access to restricted ports on arbitrary servers. The impact of these vulnerabilities can vary depending on the specific vulnerability and the context in which it is exploited.
How To Fix
Minimum fixed version
0.19.5-3.el8
This is the first release that contains the fix.
sudo dnf update LibRawTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The update provides important security fixes for the GNOME packages, addressing multiple vulnerabilities that could lead to various security risks. It is recommended to update the affected packages to ensure the system is protected. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for LibRaw →
FAQ
GNOME is a desktop environment for Linux systems, providing a user-friendly interface and a range of applications.
GDM is the GNOME Display Manager, responsible for managing user logins and sessions in the GNOME desktop environment.
Webkit2gtk3 is a web content engine used by GNOME applications to render web pages.
The update addresses multiple security vulnerabilities, including use-after-free issues, memory corruptions, logic issues, and type confusion. These vulnerabilities could lead to arbitrary code execution, information leaks, universal cross-site scripting attacks, and access to restricted ports on arbitrary servers.
To fix these vulnerabilities, update the affected GNOME packages to the latest versions: gdm 40.0 and webkit2gtk3 2.32.3.
Related vulnerabilities
Recent vulnerabilities recorded for LibRaw.
