Lucene search

K
oraclelinuxOracleLinuxELSA-2021-1586
HistoryMay 25, 2021 - 12:00 a.m.

GNOME security, bug fix, and enhancement update

2021-05-2500:00:00
linux.oracle.com
50

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

accountsservice
[0.6.55-1]

  • Rebase to 0.6.55
    Resolves: #1846376
    atkmm
    [2.24.2-7]
  • Rebuild for annobin fixes
  • Resolves: rhbz#1703969
    cairomm
    [1.12.0-8]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1703971
    chrome-gnome-shell
    [10.1-7]
  • Disable updates support
    Resolves: #1802105
    dleyna-core
    [0.6.0-3]
  • Dont remove a queue more than once
  • Remove any pending task processing handlers when destroying a queue
    Resolves: #1464902
    dleyna-server
    [0.6.0-3]
  • Avoid crash when getting server properties
    Resolves: #1464902
    enchant2
    [2.2.3-3]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1703990
    gamin
    [0.1.10-32]
  • Add a comment clarifying the license (rhbz#1096200)
    gdm
    [3.28.3-39]
  • Ensure login screen display server is is killed at log in
  • Pull in fixes for two security issues
    Resolves: #1918391
    [3.28.3-38]
  • Re-add disabling Wayland for server GPUs
    Related: #1670273
    [3.28.3-35]
  • Stop disabling Wayland for server GPUs
    Related: #1670273
    geoclue2
    [2.5.5-2]
  • Fix multilib conflicts in -devel subpackage (#1853141)
    geocode-glib
    [3.26.0-3]
  • Rebuild against fixed gtk-doc to fix another multilib conflict (#1853142)
    [3.26.0-2]
  • Fix multilib conflicts in -devel subpackage (#1853142)
    gjs
    [1.56.2-5]
  • Fix undefined property warnings
    Related: #1845660
    glib2
    [2.56.4-9]
  • Update GHmac patch to implement g_hmac_copy()
    Resolves: #1786538
  • Update keyfile settings backend
    Resolves: #1728896
  • Fix CVE-2019-13012
    Resolves: #1728632
    glibmm24
    [2.56.0-2]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1704002
    gnome-boxes
    [3.36.5-8.0.1]
  • Add Oracle Linux 8.3 and 8.4 for VM template [Orabug: 32013221] [Orabug: 32840088]
    [3.36.5-8]
  • Pass discard ‘unmap’ to supported disk drivers
  • Related: #1152037
    [3.36.5-7]
  • Fix mixing VM widgets
  • Related: #1639163
    gnome-control-center
    [3.28.2-27]
  • Update fr, ja, zh_CN translations
  • Resolves: #1876291
    [3.28.2-26]
  • Support Simple Content Access from subscription manager
    Related: #1870837
    [3.28.2-25]
  • Fix a leak found by Coverity
  • Related: #1700002
    [3.28.2-24]
  • Fix crashes when updating printer entries
  • Related: #1700002
  • Resolves: #1903043
    [3.28.2-23]
  • Update list of printers instead of regenerating it
  • Resolves: #1700002
    gnome-online-accounts
    [3.28.2-2]
  • Rebuild to fix multilib issues
    Resolves: #1765627
    gnome-photos
    [3.28.1-4]
  • Add a manual
    Resolves: #1612779
    gnome-settings-daemon
    [3.32.0-14]
  • Update fr, ja, zh_CN translations
  • Resolves: #1876291
    [3.32.0-13]
  • Add back subscription-manager plugin
    Related: #1870837
    [3.32.0-12]
  • Handle org.gnome.Shell.Screencast Stopped signal
    Related: #1705392
    gnome-shell
    [3.32.2-30]
  • Backport of touch mode
    Resolves: #1833787
    [3.32.2-29]
  • Refuse to override system extensions
    Related: #1802105
    [3.32.2-28]
  • Backport extension updates support
    Related: #1802105
    [3.32.2-27]
  • Default to printing JS backtrace on segfaults
    Resolves: #1883868
    [3.32.2-26]
  • Backport OSK fixes
    Resolves: #1871041
    [3.32.2-25]
  • Stop screen recording on monitor changes
    Resolves: #1705392
    [3.32.2-24]
  • Handle workspace from startup notification
    Resolves: #1671761
    [3.32.2-23]
  • Work around aggressive garbage collection
    Related: #1881312
    [3.32.2-22]
  • Wake up lock screen when deactivated programmatically
    Resolves: #1854290
  • Backport better caps-lock warning
    Resolves: #1861357
  • Fix more (harmless) JS warnings
    Resolves: #1881312
    [3.32.2-21]
  • Fix JS warning in AuthList downstream patch
    Resolves: #1860946
    gnome-shell-extensions
    [3.32.1-14]
  • Use same logic than Nautilus for double click/tap in desktop-icons extension
    Resolves: #1842229
    [3.32.1-13]
  • Update Japanese translation
    Related: #1865718
    [3.32.1-12]
  • Adjust gettext locale in desktop-icons extension
    Resolves: #1865718
    gnome-software
    [3.36.1-5]
  • Fix flatpak updates and removals when same ref occurs in multiple remotes
  • Resolves: #1888407
    gnome-terminal
    [3.28.3-3]
  • Support using the ‘0’, ‘+’ and ‘-’ keys from the numeric keypad as
    accelerators
  • Resolves: #837035
    gtk-doc
    [1.28-3]
  • Backport an upstream patch to fix G_MAXINT appearing as G_MAXLONG on 32 bit
  • Related: #1853142
    gtkmm24
    [2.24.5-6]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1704012
    gtkmm30
    [3.22.2-3]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1704013
    gvfs
    [1.36.2-11]
  • Add support for certificates prompts for GOA mounts (rhbz#1889411)
    libdazzle
    [3.28.5-2]
  • Rebuild to ship libdazzle-devel in CRB
  • Resolves: #1919429
    libepubgen
    [0.1.0-3]
  • Resolves: rhbz#1919432 bump n-v-r and rebuild
    libsass
    [3.4.5-6]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1704058
    libsigc++20
    [2.10.0-6]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1704059
    libvisual
    [1:0.4.0-25]
  • Fix multilib conflicts in lvconfig.h
  • Resolves: #1853155
    mutter
    [3.32.2-57]
  • Backport touch-mode
    Resolves: #1833787
    [3.32.2-56]
  • Backport geometric picking patches
    Resolves: #1919467
    [3.32.2-55]
  • Fix slow nouveau with llvmpipe
    Resolves: #1921151
    [3.32.2-54]
  • Fix polyinstantiation patch backport
    Resolves: #1861769
    [3.32.2-53]
  • Fix test case backport
    Related: #1786496
    [3.32.2-52]
  • Support polyinstantiation
    Resolves: #1861769
  • Mitigate nouveau misidentifying connectors
    Resolves: #1786496
    [3.32.2-51]
  • Add PING_TIMEOUT_DELAY to mutter MetaPreferences
    Resolves: #1886034
    [3.32.2-50]
  • Fix GLX stereo buffer rebase error
    Resolves: #1889528
    [3.32.2-49]
  • Add tile based shadow buffer damage tracking
    Resolves: #1670273
    nautilus
    [3.28.1-15]
  • Fix activation_uri handling to prevent invalid bookmarks (rhbz#1906499)
    OpenEXR
    [2.2.0-12]
  • In check, dont override PKG_CONFIG_PATH from the environment (#1907528)
    pangomm
    [2.40.1-6]
  • Rebuild for the annobin fixes
  • Resolves: rhbz#1704100
    soundtouch
    [2.0.0-3]
  • Rebuild for the annobin fixes
  • Remove an unused patch
  • Resolves: rhbz#1704123
    vala
    [0.40.19-2]
  • Fix multilib conflicts in vala-gen-introspect
  • Resolves: #1853170
    webkit2gtk3
    [2.30.4-1]
  • Update to 2.30.4
  • Related: #1883304
    [2.30.3-1]
  • Update to 2.30.3
  • Related: #1883304
    [2.30.2-2]
  • Try to fix coverity build by disabling docs (thanks to Kamil Dudka
    !)
  • Related: #1883304
    [2.30.2-1]
  • Update to 2.30.2
  • Related: #1883304
    [2.30.1-1]
  • Update to 2.30.1
  • Related: #1883304
    woff2
    [1.0.2-5]
  • Resolves: rhbz#1919435 bump NVR for rebuild

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P