Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 29: FEDORA-2019-992622684b Critical Gnome-Desktop3 Thumbnailer Issue

gnome-desktop 3.30.2.3 release, fixing thumbnailer sandbox escape, CVE-2019-11460. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-992622684b 2019-05-20 12:06:49.382132 --------------------------------------------------------------------------------Name : gnome-desktop3 Product : Fedora 29 Version : 3.30.2.3 Release : 1.fc29 URL : https://www.gnome.org/ Summary : Library with common API for various GNOME modules Description : gnome-desktop contains the libgnome-desktop library as well as a data file that exports the "GNOME" version to the Settings Details panel. The libgnome-desktop library provides API shared by several applications on the desktop, but that cannot live in the platform for various reasons. There is no API or ABI guarantee, although we are doing our best to provide stability. Documentation for the API is available with gtk-doc. --------------------------------------------------------------------------------Update Information: gnome-desktop 3.30.2.3 release, fixing thumbnailer sandbox escape, CVE-2019-11460 --------------------------------------------------------------------------------ChangeLog: * Tue May 7 2019 Kalev Lember - 3.30.2.3-1 - Update to 3.30.2.3 * Tue Feb 5 2019 Kalev Lember - 3.30.2.1-1 - Update to 3.30.2.1 - Sync package description with upstream README * Sat Oct 27 2018 Kalev Lember - 3.30.2-1 - Update to 3.30.2 * Fri Sep 28 2018 Owen Taylor - 3.30.1-2 - Disable bubblewrap Requires when building for inclusion in a Flatpak --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-992622684b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Address severe thumbnailer escape vulnerability in gnome-desktop3 for Fedora 29 users via essential security patch.. Fedora 29, gnome-desktop, security update, thumbnailer escape. . Severity: Critical. LinuxSecurity.com Team

May 20, 2019 •Critical Fedora