CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

Code injection

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

UBUNTU-CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

CVE-2012-6111

CVE-2012-6111 affects gnome-keyring: when gnome_keyring_lock_all_sync is used, stored secrets are not discarded. Public metrics indicate confidentiality impact (C: partial per CVSS2; C:H per CVSS3). No exploitation details are provided in the connected documents, and remediation details are not s...

CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

EulerOS 2.0 SP3 : glib2 (EulerOS-SA-2019-2588)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting...

EulerOS 2.0 SP2 : glib2 (EulerOS-SA-2019-2409)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference.CVE-2018-16428 - GNOME GLib 2.56.1 has an...

Debian DLA-2014-1 : vino security update

Several vulnerabilities have been identified in the VNC code of vino, a desktop sharing utility for the GNOME desktop environment. The vulnerabilities referenced below are issues that have originally been reported against Debian source package libvncserver. The vino source package in Debian ships...

EulerOS Virtualization for ARM 64 3.0.3.0 : pango (EulerOS-SA-2019-2344)

According to the version of the pango package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to ge...

Unspecified Vulnerability in GNOME Dia

GNOME Dia is a program for drawing structured graphics. A security vulnerability exists in versions of GNOME Dia prior to 2019-11-27. An attacker could exploit the vulnerability to cause the system to be unavailable...

MGASA-2019-0352 Updated glib2.0 packages fix security vulnerability

The updated packages fix a security vulnerability: filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used. CVE-2019-12450...

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

DEBIAN-CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

Code injection

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

UBUNTU-CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

CVE-2019-19451

The CVE-2019-19451 issue affects Dia (GNOME Dia) prior to the upstream patch release for 2019-11-27: a filename argument that is not a valid codepoint in the current encoding can trigger an endless loop, causing stdout spam. In practice, when triggered from a thumbnailer, the output may be logged...