Gentoo Project

GNOME Desktop

Security Bug Reports

• dev-libs/libcroco: multiple vulnerabilities (CVE-2017-{8834,8871})

  621258 - Assigned to Gentoo Security
• mail-client/evolution: gpg key trust extrapolation to new UIDs

  676366 - Assigned to Gentoo Security
• <gnome-base/gdm-40.0: authentication bypass (CVE-2020-27837)

  762460 - Assigned to Gentoo Security
• <app-arch/file-roller-3.38.1: arbitrary file overwrite via malicious archive

  780858 - Assigned to Gentoo Security
• net-libs/libgrss: Does not perform TLS certificate validation (CVE-2016-20011)

  792264 - Assigned to Gentoo Security
• <media-libs/grilo-0.3.14: improper TLS verification (CVE-2021-39365)

  809713 - Assigned to Gentoo Security
• gnome-extra/libgda: improper TLS verification (CVE-2021-39359)

  809719 - Assigned to Gentoo Security
• <x11-libs/gdk-pixbuf-2.42.9: heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files (CVE-2021-44648)

  831077 - Assigned to Gentoo Security
• <app-misc/tracker-miners-3.5.3: Sandbox weakness

  916378 - Assigned to Gentoo Security
• <gnome-base/gnome-shell-45.0: lock screen bypass via screenshot tool

  918713 - Assigned to Gentoo Security
• <dev-libs/glib-2.78.6: Signal subscription vulnerabilities

  931507 - Assigned to Gentoo Security
• <net-libs/webkit-gtk-2.44.3{,-r410,-r600}: multiple vulnerabilities

  938026 - Assigned to Gentoo Security
• gnome-extra/libgsf: Multiple vulnerabilities

  940777 - Assigned to Gentoo Security
• <net-libs/webkit-gtk-2.46.3{,-r410,-r600}: multiple vulnerabilities

  941276 - Assigned to Gentoo Security