Lucene search

AmazonALAS-2024-2488

HistoryFeb 29, 2024 - 10:03 a.m.

Low: glade

2024-02-2910:03:00

alas.aws.amazon.com

glade

gnome

denial of service

vulnerability

amazon linux

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Issue Overview:

plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash). (CVE-2020-36774)

Affected Packages:

glade

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update glade to update your system.

New Packages:

aarch64:  
    glade-3.22.1-1.amzn2.0.1.aarch64  
    glade-libs-3.22.1-1.amzn2.0.1.aarch64  
    glade-devel-3.22.1-1.amzn2.0.1.aarch64  
    glade-debuginfo-3.22.1-1.amzn2.0.1.aarch64  
  
i686:  
    glade-3.22.1-1.amzn2.0.1.i686  
    glade-libs-3.22.1-1.amzn2.0.1.i686  
    glade-devel-3.22.1-1.amzn2.0.1.i686  
    glade-debuginfo-3.22.1-1.amzn2.0.1.i686  
  
src:  
    glade-3.22.1-1.amzn2.0.1.src  
  
x86_64:  
    glade-3.22.1-1.amzn2.0.1.x86_64  
    glade-libs-3.22.1-1.amzn2.0.1.x86_64  
    glade-devel-3.22.1-1.amzn2.0.1.x86_64  
    glade-debuginfo-3.22.1-1.amzn2.0.1.x86_64

Additional References

Red Hat: CVE-2020-36774

Mitre: CVE-2020-36774

OSVersionArchitecturePackageVersionFilename
Amazon Linux2aarch64glade< 3.22.1-1.amzn2.0.1glade-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux2aarch64glade-libs< 3.22.1-1.amzn2.0.1glade-libs-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux2aarch64glade-devel< 3.22.1-1.amzn2.0.1glade-devel-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux2aarch64glade-debuginfo< 3.22.1-1.amzn2.0.1glade-debuginfo-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux2i686glade< 3.22.1-1.amzn2.0.1glade-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux2i686glade-libs< 3.22.1-1.amzn2.0.1glade-libs-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux2i686glade-devel< 3.22.1-1.amzn2.0.1glade-devel-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux2i686glade-debuginfo< 3.22.1-1.amzn2.0.1glade-debuginfo-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux2x86_64glade< 3.22.1-1.amzn2.0.1glade-3.22.1-1.amzn2.0.1.x86_64.rpm
Amazon Linux2x86_64glade-libs< 3.22.1-1.amzn2.0.1glade-libs-3.22.1-1.amzn2.0.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Amazon Linux	2	aarch64	glade	< 3.22.1-1.amzn2.0.1	glade-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux	2	aarch64	glade-libs	< 3.22.1-1.amzn2.0.1	glade-libs-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux	2	aarch64	glade-devel	< 3.22.1-1.amzn2.0.1	glade-devel-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux	2	aarch64	glade-debuginfo	< 3.22.1-1.amzn2.0.1	glade-debuginfo-3.22.1-1.amzn2.0.1.aarch64.rpm
Amazon Linux	2	i686	glade	< 3.22.1-1.amzn2.0.1	glade-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux	2	i686	glade-libs	< 3.22.1-1.amzn2.0.1	glade-libs-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux	2	i686	glade-devel	< 3.22.1-1.amzn2.0.1	glade-devel-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux	2	i686	glade-debuginfo	< 3.22.1-1.amzn2.0.1	glade-debuginfo-3.22.1-1.amzn2.0.1.i686.rpm
Amazon Linux	2	x86_64	glade	< 3.22.1-1.amzn2.0.1	glade-3.22.1-1.amzn2.0.1.x86_64.rpm
Amazon Linux	2	x86_64	glade-libs	< 3.22.1-1.amzn2.0.1	glade-libs-3.22.1-1.amzn2.0.1.x86_64.rpm

Rows per page:

1-10 of 121