Wind River Support Network

HomeDefectsLIN9-8583
Fixed

LIN9-8583 : Security Advisory - glib-2.0 - CVE-2019-12450

Created: May 30, 2019    Updated: Jun 16, 2019
Resolved Date: Jun 9, 2019
Found In Version: 9.0.0.1
Fix Version: 9.0.0.21
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-12450 User=admin}

CVEs


Live chat
Online