file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead default permissions are used.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

GLib file_copy_fallback ignored copy permissions in versions 2.15.0–2.61.1; default permissions.

Reporter	Title	Published	Views	Family All 132
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2019-12450)	4 Aug 202117:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	2 Feb 202122:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2019-12450)	4 Aug 202117:56	–	ibm
Tenable Nessus	Amazon Linux 2 : glib2 (ALAS-2019-1289)	20 Sep 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : glib2 (ALAS-2020-1553)	11 Nov 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : glib2 (ALAS-2019-1256)	13 Aug 201900:00	–	nessus
Tenable Nessus	CentOS 8 : glib2 (CESA-2019:3530)	29 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 7 : glib2 and ibus (RHSA-2020:3978)	20 Oct 202000:00	–	nessus