{"cves":["CVE-2019-8846","CVE-2020-3897","CVE-2020-3900","CVE-2020-9895","CVE-2019-8813","CVE-2020-9806","CVE-2020-3868","CVE-2020-3865","CVE-2020-14391","CVE-2019-8625","CVE-2019-8720","CVE-2019-8808","CVE-2019-8823","CVE-2020-3867","CVE-2019-8820","CVE-2020-3895","CVE-2020-3902","CVE-2019-8710","CVE-2020-3862","CVE-2019-8764","CVE-2020-3864","CVE-2020-3885","CVE-2020-9915","CVE-2019-8769","CVE-2019-8782","CVE-2019-8814","CVE-2019-8816","CVE-2020-9925","CVE-2019-8771","CVE-2019-8811","CVE-2019-8783","CVE-2019-8835","CVE-2019-8844","CVE-2020-3894","CVE-2019-8819","CVE-2019-8766","CVE-2020-9894","CVE-2019-8815","CVE-2020-3899","CVE-2020-3901","CVE-2020-10018","CVE-2019-8743","CVE-2020-9850","CVE-2020-11793","CVE-2020-9843","CVE-2020-15503","CVE-2020-9807","CVE-2019-8812","CVE-2020-9802","CVE-2020-9862","CVE-2020-9803","CVE-2020-9893","CVE-2020-9805"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"dleyna-renderer\n[0.6.0-3]\n- Add a manual\nResolves: #1612579\n\nfrei0r-plugins\n[1.6.1-7]\n- Rebuild with newer annobin to fix rpmdiff problems\n- Fix the build with a newer opencv\n- Resolves: rhbz#1703994\n\ngdm\n[3.28.3-34]\n- Fix file descriptor leak\n  Resolves: #1877853\n\n[3.28.3-33]\n- Fix problem with Xorg fallback\n  Resolves: #1868260\n\n[3.28.3-32]\n- Add dconf db to file manifest\n  Related: #1833158\n\n[3.28.3-31]\n- add back gdm system db to dconf profile\n  Resolves: #1833158\n\n[3.28.3-30]\n- Make sure login screen is killed during login\n  Resolves: #1618481\n\ngnome-control-center\n[3.28.2-22]\n- Categorize Infiniband devices correctly\n  Resolves: #1826379\n\n[3.28.2-21]\n- Honor sound theme changes when changing from the default theme\n- Resolves: #1706008\n\n[3.28.2-20]\n- Fix 90min automatic sleep option to not last 80min\n- Resolves: #1706076\n\ngnome-photos\n[3.28.1-3]\n- Disable Python 2 during the build - itstool doesnt need it anymore\nResolves: #1597806\n\n[3.28.1-2]\n- rebuild\n\ngnome-remote-desktop\n[0.1.8-3]\n- Backport cursor only frame fixes\n  Related: #1837406\n\n[0.1.8-2]\n- Dont crash on metadata only buffers\n  Resolves: #1847062\n\n[0.1.8-1]\n- Rebase to 0.1.8\n  Resolves: #1837406\n\ngnome-session\n[3.28.1-10.0.1]\n- Update kiosk-session subpackage with Oracle references [Orabug: 32095108]\n\n[3.28.1-10]\n- Show cursor explicitly from session selector\n  Resolves: #1624430\n\n[3.28.1-9]\n- Add kiosk-session subpackage to help users set up RHEL for\n  kiosk/point-of-sale use.\n  Resolves: #1739556\n\ngnome-settings-daemon\n[3.32.0-11]\n- Remove subman plugin for now\n  Resolves: #1872457\n\n[3.32.0-10]\n- Disable subman plugin on CentOS\n  Resolves: #1827030\n\ngnome-shell\n[3.32.2-20]\n- Fix popupMenu keynav when NumLock is active\n  Resolves: #1840080\n\n[3.32.2-19]\n- Fix last backport\n  Resolves: #1847051\n\n[3.32.2-18]\n- Fix more spurious allocation warnings\n  Resolves: #1715845\n\n[3.32.2-17]\n- Really allow using perf-tool on wayland\n  Resolves: #1652178\n- Fix timed login without user list\n  Resolves: #1668895\n- Fix HighContrast/symbolic icon mixup\n  Resolves: #1794045\n- Backport introspect API changes\n  Resolves: #1837413\n\n[3.32.2-16]\n- Drop bad upstream patch\n  Resolves: #1820760\n\n[3.32.2-15]\n- Improve performance under load\n  Resolves: #1820760\n\ngnome-shell-extensions\n[3.32.1-11]\n- Adjust dash-to-dock for classic backports\n  Resolves: #1805929\n- Fix inconsistent state in window-list prefs dialog\n  Resolves: #1824362\n\ngnome-terminal\n[3.28.3-2]\n- Add a manual\n- Resolves: #1612688\n\ngsettings-desktop-schemas\n[3.32.0-5]\n- Recommend DejaVu Sans Mono font as the default monospace font\n  Resolves: #1656262\n\ngtk3\n[3.22.30-6]\n- Fix reuse of list box header widgets (#rhbz1843486)\n\ngtk-doc\n[1.28-2]\n- Backport a patch to fix x86_64/i686 differences in generated documentation\n- Resolves: #1634770\n\ngvfs\n[1.36.2-10]\n- Fix libusb(x) requirements (rhbz#1866332)\n\n[1.36.2-9]\n- Improve enumeration performance of smb backend (rhbz#1569868)\n\nLibRaw\n[0.19.5-2]\n- Backport fix for CVE-2020-15503 from Fedora\nResolves: #1853529\n\nlibsoup\n[2.62.3-2]\n- Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270)\n\nmutter\n[3.32.2-48]\n- Fix GLX stereo buffer rebase error\n  Resolves: #1880339\n\n[3.32.2-47]\n- Fix screen sharing on wayland\n  Resolves: #1873963\n\n[3.32.2-46]\n- Handle cursor only screen cast frames better\n  Related: #1837381\n\n[3.32.2-45]\n- Handle GPU unplug gracefully\n  Resolves: #1846191\n\n[3.32.2-44]\n- Dont show widow actor until explictly shown\n  Resolves: #1719937\n\n[3.32.2-43]\n- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages\n  Resolves: #1847203\n\n[3.32.2-42]\n- Dont pass DMA buffers if they cant be mmap():ed\n  Related: #1847062\n\n[3.32.2-41]\n- Backport is_rendering_hardware_acclerated() API\n  Related: #1837381\n\n[3.32.2-40]\n- Fix DMA buffer memory leak\n  Related: #1837381\n\n[3.32.2-39]\n- Fix incorrect pipewire dependency version\n  Related: #1837381\n\n[3.32.2-38]\n- Backport screen cast and remote desktop improvements\n  Resolves: #1837381\n\n[3.32.2-37]\n- Fix corrupted background after suspend\n  Resolves: #1828162\n\nnautilus\n[3.28.1-14]\n- Fix broken tracker query under certain locales (rhbz#1847061)\n\n[3.28.1-13]\n- Clear selection if any files dont match the pattern (rhbz#1207179)\n- Fix endless content size calculations (rhbz#1566027)\n- Honor umask when creating new files (rhbz#1778579)\n- Close 'There is no application...' dialog after response (rhbz#1816070)\n\nPackageKit\n[1.1.12-6.0.1]\n- removed rhel-Vendor.conf.patch\n\n[1.1.12-6]\n- Fix documentation links in Vendor.conf\n- Resolves: #1837648\n\n[1.1.12-5]\n- Do not shutdown the daemon on idle\n- Resolves: #1814820\n\npipewire0.2\n[0.2.7-6]\n- Fix Conflicts: line\n- Remove Recommends: line, its wrong\n- Resolves: rhbz#1832347\n\n[0.2.7-5]\n- Fix Conflicts: line\n- Resolves: rhbz#1832347\n\n[0.2.7-4]\n- Add gating file\n- Resolves: rhbz#1832347\n\n[0.2.7-3]\n- Change source URL\n- Resolves: rhbz#1832347\n\n[0.2.7-2]\n- Add compat -devel package\n\n[0.2.7-1]\n- First version\n- Fix bluez5 plugins build\n\npipewire\n[0.3.6-1]\n- Update to 0.3.6\n- Resolves: rhbz#1832347\n\n[0.3.5-3]\n- Rebuild\n- Resolves: rhbz#1832347\n\n[0.3.5-2]\n- Disable vulkan\n- Resolves: rhbz#1832347\n\n[0.3.5-1]\n- Update to 0.3.5\n- Disable pulse and jack\n- Add patch to work with meson 0.49\n- Add patch to fix neon compilation\n- Resolves: rhbz#1832347\n\npotrace\n[1.15-3]\n- Fixing build for flatpak (rhbz#1840788)\n\npygobject3\n[3.28.3-2]\n- Add lock to avoid two type object wrappers getting generated at\n  the same time in multi-threaded programs.\n  Resolves: #1844578\n\ntracker\n[2.1.5-2]\n- Rebuild to include tracker-devel in CRB\n- Resolves: #1758891\n\nvte291\n[0.52.4-2]\n- Avoid overriding -fno-exceptions\nResolves: #1804719\n\n[0.52.4-1]\n- Update to 0.52.4\nResolves: #1804719\n\nwebkit2gtk3\n[2.28.4-1]\n- Update to 2.28.4\n- Related: #1817143\n\n[2.28.2-2]\n- Related: rhbz#1817143 Properly remove webkit2gtk3-plugin-process-gtk2 package\n\n[2.28.2-1]\n- Resolves: rhbz#1817143 Update to 2.28.2\n\nwebrtc-audio-processing\n[0.3-9]\n- Rebuild to address Annobin coverage issues\nResolves: #1704148\n\nxdg-desktop-portal\n[1.6.0-2]\n- Require pipewire0.2-libs for legacy application support.\n  Resolves: #1854734\n\n[1.6.0-1]\n- Rebase to 1.6.0 (#1775345)\n- Backport PipeWire 0.3 support (#1775345)\n- Backport fixes (#1775345)\n\nxdg-desktop-portal-gtk\n[1.6.0-1]\n- Rebase to 1.6.0 (#1837413)\n- Bump supported Mutter screen cast API version (#1837413)\n- Backport bugfix (#1837413)","id":"ELSA-2020-4451","ovalId":"oval:com.oracle.elsa:def:20204451","source":"oracle_linux","title":"ELSA-2020-4451:  GNOME security, bug fix, and enhancement update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2020-4451.html"}