elsa-2020-4451
oracle_linuxdleyna-renderer [0.6.0-3] - Add a manual Resolves: #1612579 frei0r-plugins [1.6.1-7] - Rebuild with newer annobin to fix rpmdiff problems - Fix the build with a newer opencv - Resolves: rhbz#1703994 gdm [3.28.3-34] - Fix file descriptor leak Resolves: #1877853 [3.28.3-33] - Fix problem with Xorg fallback Resolves: #1868260 [3.28.3-32] - Add dconf db to file manifest Related: #1833158 [3.28.3-31] - add back gdm system db to dconf profile Resolves: #1833158 [3.28.3-30] - Make sure login screen is killed during login Resolves: #1618481 gnome-control-center [3.28.2-22] - Categorize Infiniband devices correctly Resolves: #1826379 [3.28.2-21] - Honor sound theme changes when changing from the default theme - Resolves: #1706008 [3.28.2-20] - Fix 90min automatic sleep option to not last 80min - Resolves: #1706076 gnome-photos [3.28.1-3] - Disable Python 2 during the build - itstool doesnt need it anymore Resolves: #1597806 [3.28.1-2] - rebuild gnome-remote-desktop [0.1.8-3] - Backport cursor only frame fixes Related: #1837406 [0.1.8-2] - Dont crash on metadata only buffers Resolves: #1847062 [0.1.8-1] - Rebase to 0.1.8 Resolves: #1837406 gnome-session [3.28.1-10.0.1] - Update kiosk-session subpackage with Oracle references [Orabug: 32095108] [3.28.1-10] - Show cursor explicitly from session selector Resolves: #1624430 [3.28.1-9] - Add kiosk-session subpackage to help users set up RHEL for kiosk/point-of-sale use. Resolves: #1739556 gnome-settings-daemon [3.32.0-11] - Remove subman plugin for now Resolves: #1872457 [3.32.0-10] - Disable subman plugin on CentOS Resolves: #1827030 gnome-shell [3.32.2-20] - Fix popupMenu keynav when NumLock is active Resolves: #1840080 [3.32.2-19] - Fix last backport Resolves: #1847051 [3.32.2-18] - Fix more spurious allocation warnings Resolves: #1715845 [3.32.2-17] - Really allow using perf-tool on wayland Resolves: #1652178 - Fix timed login without user list Resolves: #1668895 - Fix HighContrast/symbolic icon mixup Resolves: #1794045 - Backport introspect API changes Resolves: #1837413 [3.32.2-16] - Drop bad upstream patch Resolves: #1820760 [3.32.2-15] - Improve performance under load Resolves: #1820760 gnome-shell-extensions [3.32.1-11] - Adjust dash-to-dock for classic backports Resolves: #1805929 - Fix inconsistent state in window-list prefs dialog Resolves: #1824362 gnome-terminal [3.28.3-2] - Add a manual - Resolves: #1612688 gsettings-desktop-schemas [3.32.0-5] - Recommend DejaVu Sans Mono font as the default monospace font Resolves: #1656262 gtk3 [3.22.30-6] - Fix reuse of list box header widgets (#rhbz1843486) gtk-doc [1.28-2] - Backport a patch to fix x86_64/i686 differences in generated documentation - Resolves: #1634770 gvfs [1.36.2-10] - Fix libusb(x) requirements (rhbz#1866332) [1.36.2-9] - Improve enumeration performance of smb backend (rhbz#1569868) LibRaw [0.19.5-2] - Backport fix for CVE-2020-15503 from Fedora Resolves: #1853529 libsoup [2.62.3-2] - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) mutter [3.32.2-48] - Fix GLX stereo buffer rebase error Resolves: #1880339 [3.32.2-47] - Fix screen sharing on wayland Resolves: #1873963 [3.32.2-46] - Handle cursor only screen cast frames better Related: #1837381 [3.32.2-45] - Handle GPU unplug gracefully Resolves: #1846191 [3.32.2-44] - Dont show widow actor until explictly shown Resolves: #1719937 [3.32.2-43] - Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages Resolves: #1847203 [3.32.2-42] - Dont pass DMA buffers if they cant be mmap():ed Related: #1847062 [3.32.2-41] - Backport is_rendering_hardware_acclerated() API Related: #1837381 [3.32.2-40] - Fix DMA buffer memory leak Related: #1837381 [3.32.2-39] - Fix incorrect pipewire dependency version Related: #1837381 [3.32.2-38] - Backport screen cast and remote desktop improvements Resolves: #1837381 [3.32.2-37] - Fix corrupted background after suspend Resolves: #1828162 nautilus [3.28.1-14] - Fix broken tracker query under certain locales (rhbz#1847061) [3.28.1-13] - Clear selection if any files dont match the pattern (rhbz#1207179) - Fix endless content size calculations (rhbz#1566027) - Honor umask when creating new files (rhbz#1778579) - Close 'There is no application...' dialog after response (rhbz#1816070) PackageKit [1.1.12-6.0.1] - removed rhel-Vendor.conf.patch [1.1.12-6] - Fix documentation links in Vendor.conf - Resolves: #1837648 [1.1.12-5] - Do not shutdown the daemon on idle - Resolves: #1814820 pipewire0.2 [0.2.7-6] - Fix Conflicts: line - Remove Recommends: line, its wrong - Resolves: rhbz#1832347 [0.2.7-5] - Fix Conflicts: line - Resolves: rhbz#1832347 [0.2.7-4] - Add gating file - Resolves: rhbz#1832347 [0.2.7-3] - Change source URL - Resolves: rhbz#1832347 [0.2.7-2] - Add compat -devel package [0.2.7-1] - First version - Fix bluez5 plugins build pipewire [0.3.6-1] - Update to 0.3.6 - Resolves: rhbz#1832347 [0.3.5-3] - Rebuild - Resolves: rhbz#1832347 [0.3.5-2] - Disable vulkan - Resolves: rhbz#1832347 [0.3.5-1] - Update to 0.3.5 - Disable pulse and jack - Add patch to work with meson 0.49 - Add patch to fix neon compilation - Resolves: rhbz#1832347 potrace [1.15-3] - Fixing build for flatpak (rhbz#1840788) pygobject3 [3.28.3-2] - Add lock to avoid two type object wrappers getting generated at the same time in multi-threaded programs. Resolves: #1844578 tracker [2.1.5-2] - Rebuild to include tracker-devel in CRB - Resolves: #1758891 vte291 [0.52.4-2] - Avoid overriding -fno-exceptions Resolves: #1804719 [0.52.4-1] - Update to 0.52.4 Resolves: #1804719 webkit2gtk3 [2.28.4-1] - Update to 2.28.4 - Related: #1817143 [2.28.2-2] - Related: rhbz#1817143 Properly remove webkit2gtk3-plugin-process-gtk2 package [2.28.2-1] - Resolves: rhbz#1817143 Update to 2.28.2 webrtc-audio-processing [0.3-9] - Rebuild to address Annobin coverage issues Resolves: #1704148 xdg-desktop-portal [1.6.0-2] - Require pipewire0.2-libs for legacy application support. Resolves: #1854734 [1.6.0-1] - Rebase to 1.6.0 (#1775345) - Backport PipeWire 0.3 support (#1775345) - Backport fixes (#1775345) xdg-desktop-portal-gtk [1.6.0-1] - Rebase to 1.6.0 (#1837413) - Bump supported Mutter screen cast API version (#1837413) - Backport bugfix (#1837413)
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2019-8846",
"CVE-2020-3897",
"CVE-2020-3900",
"CVE-2020-9895",
"CVE-2019-8813",
"CVE-2020-9806",
"CVE-2020-3868",
"CVE-2020-3865",
"CVE-2020-14391",
"CVE-2019-8625",
"CVE-2019-8720",
"CVE-2019-8808",
"CVE-2019-8823",
"CVE-2020-3867",
"CVE-2019-8820",
"CVE-2020-3895",
"CVE-2020-3902",
"CVE-2019-8710",
"CVE-2020-3862",
"CVE-2019-8764",
"CVE-2020-3864",
"CVE-2020-3885",
"CVE-2020-9915",
"CVE-2019-8769",
"CVE-2019-8782",
"CVE-2019-8814",
"CVE-2019-8816",
"CVE-2020-9925",
"CVE-2019-8771",
"CVE-2019-8811",
"CVE-2019-8783",
"CVE-2019-8835",
"CVE-2019-8844",
"CVE-2020-3894",
"CVE-2019-8819",
"CVE-2019-8766",
"CVE-2020-9894",
"CVE-2019-8815",
"CVE-2020-3899",
"CVE-2020-3901",
"CVE-2020-10018",
"CVE-2019-8743",
"CVE-2020-9850",
"CVE-2020-11793",
"CVE-2020-9843",
"CVE-2020-15503",
"CVE-2020-9807",
"CVE-2019-8812",
"CVE-2020-9802",
"CVE-2020-9862",
"CVE-2020-9803",
"CVE-2020-9893",
"CVE-2020-9805"
],
"cvss": 0.0,
"database_specific": {
"severity": "MODERATE"
},
"description": "dleyna-renderer\n[0.6.0-3]\n- Add a manual\nResolves: #1612579\n\nfrei0r-plugins\n[1.6.1-7]\n- Rebuild with newer annobin to fix rpmdiff problems\n- Fix the build with a newer opencv\n- Resolves: rhbz#1703994\n\ngdm\n[3.28.3-34]\n- Fix file descriptor leak\n Resolves: #1877853\n\n[3.28.3-33]\n- Fix problem with Xorg fallback\n Resolves: #1868260\n\n[3.28.3-32]\n- Add dconf db to file manifest\n Related: #1833158\n\n[3.28.3-31]\n- add back gdm system db to dconf profile\n Resolves: #1833158\n\n[3.28.3-30]\n- Make sure login screen is killed during login\n Resolves: #1618481\n\ngnome-control-center\n[3.28.2-22]\n- Categorize Infiniband devices correctly\n Resolves: #1826379\n\n[3.28.2-21]\n- Honor sound theme changes when changing from the default theme\n- Resolves: #1706008\n\n[3.28.2-20]\n- Fix 90min automatic sleep option to not last 80min\n- Resolves: #1706076\n\ngnome-photos\n[3.28.1-3]\n- Disable Python 2 during the build - itstool doesnt need it anymore\nResolves: #1597806\n\n[3.28.1-2]\n- rebuild\n\ngnome-remote-desktop\n[0.1.8-3]\n- Backport cursor only frame fixes\n Related: #1837406\n\n[0.1.8-2]\n- Dont crash on metadata only buffers\n Resolves: #1847062\n\n[0.1.8-1]\n- Rebase to 0.1.8\n Resolves: #1837406\n\ngnome-session\n[3.28.1-10.0.1]\n- Update kiosk-session subpackage with Oracle references [Orabug: 32095108]\n\n[3.28.1-10]\n- Show cursor explicitly from session selector\n Resolves: #1624430\n\n[3.28.1-9]\n- Add kiosk-session subpackage to help users set up RHEL for\n kiosk/point-of-sale use.\n Resolves: #1739556\n\ngnome-settings-daemon\n[3.32.0-11]\n- Remove subman plugin for now\n Resolves: #1872457\n\n[3.32.0-10]\n- Disable subman plugin on CentOS\n Resolves: #1827030\n\ngnome-shell\n[3.32.2-20]\n- Fix popupMenu keynav when NumLock is active\n Resolves: #1840080\n\n[3.32.2-19]\n- Fix last backport\n Resolves: #1847051\n\n[3.32.2-18]\n- Fix more spurious allocation warnings\n Resolves: #1715845\n\n[3.32.2-17]\n- Really allow using perf-tool on wayland\n Resolves: #1652178\n- Fix timed login without user list\n Resolves: #1668895\n- Fix HighContrast/symbolic icon mixup\n Resolves: #1794045\n- Backport introspect API changes\n Resolves: #1837413\n\n[3.32.2-16]\n- Drop bad upstream patch\n Resolves: #1820760\n\n[3.32.2-15]\n- Improve performance under load\n Resolves: #1820760\n\ngnome-shell-extensions\n[3.32.1-11]\n- Adjust dash-to-dock for classic backports\n Resolves: #1805929\n- Fix inconsistent state in window-list prefs dialog\n Resolves: #1824362\n\ngnome-terminal\n[3.28.3-2]\n- Add a manual\n- Resolves: #1612688\n\ngsettings-desktop-schemas\n[3.32.0-5]\n- Recommend DejaVu Sans Mono font as the default monospace font\n Resolves: #1656262\n\ngtk3\n[3.22.30-6]\n- Fix reuse of list box header widgets (#rhbz1843486)\n\ngtk-doc\n[1.28-2]\n- Backport a patch to fix x86_64/i686 differences in generated documentation\n- Resolves: #1634770\n\ngvfs\n[1.36.2-10]\n- Fix libusb(x) requirements (rhbz#1866332)\n\n[1.36.2-9]\n- Improve enumeration performance of smb backend (rhbz#1569868)\n\nLibRaw\n[0.19.5-2]\n- Backport fix for CVE-2020-15503 from Fedora\nResolves: #1853529\n\nlibsoup\n[2.62.3-2]\n- Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270)\n\nmutter\n[3.32.2-48]\n- Fix GLX stereo buffer rebase error\n Resolves: #1880339\n\n[3.32.2-47]\n- Fix screen sharing on wayland\n Resolves: #1873963\n\n[3.32.2-46]\n- Handle cursor only screen cast frames better\n Related: #1837381\n\n[3.32.2-45]\n- Handle GPU unplug gracefully\n Resolves: #1846191\n\n[3.32.2-44]\n- Dont show widow actor until explictly shown\n Resolves: #1719937\n\n[3.32.2-43]\n- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages\n Resolves: #1847203\n\n[3.32.2-42]\n- Dont pass DMA buffers if they cant be mmap():ed\n Related: #1847062\n\n[3.32.2-41]\n- Backport is_rendering_hardware_acclerated() API\n Related: #1837381\n\n[3.32.2-40]\n- Fix DMA buffer memory leak\n Related: #1837381\n\n[3.32.2-39]\n- Fix incorrect pipewire dependency version\n Related: #1837381\n\n[3.32.2-38]\n- Backport screen cast and remote desktop improvements\n Resolves: #1837381\n\n[3.32.2-37]\n- Fix corrupted background after suspend\n Resolves: #1828162\n\nnautilus\n[3.28.1-14]\n- Fix broken tracker query under certain locales (rhbz#1847061)\n\n[3.28.1-13]\n- Clear selection if any files dont match the pattern (rhbz#1207179)\n- Fix endless content size calculations (rhbz#1566027)\n- Honor umask when creating new files (rhbz#1778579)\n- Close 'There is no application...' dialog after response (rhbz#1816070)\n\nPackageKit\n[1.1.12-6.0.1]\n- removed rhel-Vendor.conf.patch\n\n[1.1.12-6]\n- Fix documentation links in Vendor.conf\n- Resolves: #1837648\n\n[1.1.12-5]\n- Do not shutdown the daemon on idle\n- Resolves: #1814820\n\npipewire0.2\n[0.2.7-6]\n- Fix Conflicts: line\n- Remove Recommends: line, its wrong\n- Resolves: rhbz#1832347\n\n[0.2.7-5]\n- Fix Conflicts: line\n- Resolves: rhbz#1832347\n\n[0.2.7-4]\n- Add gating file\n- Resolves: rhbz#1832347\n\n[0.2.7-3]\n- Change source URL\n- Resolves: rhbz#1832347\n\n[0.2.7-2]\n- Add compat -devel package\n\n[0.2.7-1]\n- First version\n- Fix bluez5 plugins build\n\npipewire\n[0.3.6-1]\n- Update to 0.3.6\n- Resolves: rhbz#1832347\n\n[0.3.5-3]\n- Rebuild\n- Resolves: rhbz#1832347\n\n[0.3.5-2]\n- Disable vulkan\n- Resolves: rhbz#1832347\n\n[0.3.5-1]\n- Update to 0.3.5\n- Disable pulse and jack\n- Add patch to work with meson 0.49\n- Add patch to fix neon compilation\n- Resolves: rhbz#1832347\n\npotrace\n[1.15-3]\n- Fixing build for flatpak (rhbz#1840788)\n\npygobject3\n[3.28.3-2]\n- Add lock to avoid two type object wrappers getting generated at\n the same time in multi-threaded programs.\n Resolves: #1844578\n\ntracker\n[2.1.5-2]\n- Rebuild to include tracker-devel in CRB\n- Resolves: #1758891\n\nvte291\n[0.52.4-2]\n- Avoid overriding -fno-exceptions\nResolves: #1804719\n\n[0.52.4-1]\n- Update to 0.52.4\nResolves: #1804719\n\nwebkit2gtk3\n[2.28.4-1]\n- Update to 2.28.4\n- Related: #1817143\n\n[2.28.2-2]\n- Related: rhbz#1817143 Properly remove webkit2gtk3-plugin-process-gtk2 package\n\n[2.28.2-1]\n- Resolves: rhbz#1817143 Update to 2.28.2\n\nwebrtc-audio-processing\n[0.3-9]\n- Rebuild to address Annobin coverage issues\nResolves: #1704148\n\nxdg-desktop-portal\n[1.6.0-2]\n- Require pipewire0.2-libs for legacy application support.\n Resolves: #1854734\n\n[1.6.0-1]\n- Rebase to 1.6.0 (#1775345)\n- Backport PipeWire 0.3 support (#1775345)\n- Backport fixes (#1775345)\n\nxdg-desktop-portal-gtk\n[1.6.0-1]\n- Rebase to 1.6.0 (#1837413)\n- Bump supported Mutter screen cast API version (#1837413)\n- Backport bugfix (#1837413)",
"id": "ELSA-2020-4451",
"ovalId": "oval:com.oracle.elsa:def:20204451",
"source": "oracle_linux",
"title": "ELSA-2020-4451: GNOME security, bug fix, and enhancement update (MODERATE)",
"url": "https://linux.oracle.com/errata/ELSA-2020-4451.html"
}