CVE-2020-29385

GNOME gdk-pixbuf aka GdkPixbuf before 2.42.2 allows a denial of service infinite loop in lzw.c in the function writeindexes. if c-selfcode equals 10, self-codetable10.extends will assign the value 11 to c. The next execution in the loop will assign self-codetable11.extends to c, which will give t...

CVE-2020-29385

GNOME gdk-pixbuf aka GdkPixbuf before 2.42.2 allows a denial of service infinite loop in lzw.c in the function writeindexes. if c-selfcode equals 10, self-codetable10.extends will assign the value 11 to c. The next execution in the loop will assign self-codetable11.extends to c, which will give t...

Code injection

GNOME gdk-pixbuf aka GdkPixbuf before 2.42.2 allows a denial of service infinite loop in lzw.c in the function writeindexes. if c-selfcode equals 10, self-codetable10.extends will assign the value 11 to c. The next execution in the loop will assign self-codetable11.extends to c, which will give t...

CVE-2020-29385

GNOME gdk-pixbuf aka GdkPixbuf before 2.42.2 allows a denial of service infinite loop in lzw.c in the function writeindexes. if c-selfcode equals 10, self-codetable10.extends will assign the value 11 to c. The next execution in the loop will assign self-codetable11.extends to c, which will give t...

CVE-2020-29385

CVE-2020-29385 affects GNOME gdk-pixbuf (GdkPixbuf) up to version 2.42.1; the flaw is in lzw.c write_indexes where, under a crafted LZW GIF input, code_table[10] and code_table[11] can loop infinitely, causing a denial of service. Publicly available documents show impact as an infinite loop in GI...

GNOME Display Manager License Issue Vulnerability

GNOME Display Manager GDM is a display manager. GNOME Display Manager suffers from an authorization issue vulnerability that can be exploited by an attacker to bypass restrictions via GDM's auto-lock screen in order to gain privileges...

GNOME Display Manager 竞争条件问题漏洞

GNOME Display Manager GDM is a display manager. GNOME Display Manager suffers from an authorization issue vulnerability that can be exploited by an attacker to bypass restrictions via GDM's auto-lock screen in order to gain privileges...

Fedora 32 : firefox (2020-0e26e95566)

Update to Firefox 84 - Built with system nss Please give karma to nss packages which are needed for this update : https://bodhi.fedoraproject.org/updates/FEDORA-2020-c489b93b18 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d04a8e97b3 ---- - New upstream version Firefox 84 - Enabled...

Fedora 33 : firefox (2020-af3857afd5)

Update to Firefox 84 - Built with system nss Please give karma to nss packages which are needed for this update : https://bodhi.fedoraproject.org/updates/FEDORA-2020-c489b93b18 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d04a8e97b3 ---- - New upstream version Firefox 84 - Enabled...

EulerOS 2.0 SP5 : gnome-shell (EulerOS-SA-2020-2547)

According to the version of the gnome-shell packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with...

Huawei EulerOS: Security Advisory for gnome-shell (EulerOS-SA-2020-2547)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : evolution (EulerOS-SA-2020-2543)

According to the version of the evolution packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains...

CVE-2020-35457

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

CVE-2020-35457

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

CVE-2020-35457

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

CVE-2020-35457

DISPUTED GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed...

Integer overflow

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

CVE-2020-35457

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

CVE-2020-35457

CVE-2020-35457 affects GNOME GLib (glib2) before 2.65.3, with an integer overflow in g_option_group_add_entries that could lead to an out-of-bounds write. Connected advisories confirm multiple vendors/distros reference a patch in GLib2; updates are available (e.g., GLib2 2.65.3+ or distro-specifi...

CVE-2020-35457

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...