Linux · Security advisory · November 14, 2019

ELSA-2019-3553: Security update for 107 packages

ELSA-2019-3553, released November 14, 2019, fixes 2 CVEs across 107 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
SDLol 80:1.2.15-35.el8
SDL-develol 80:1.2.15-35.el8
accountsserviceol 80:0.6.50-7.el8
accountsservice-develol 80:0.6.50-7.el8
accountsservice-libsol 80:0.6.50-7.el8
appstream-dataol 80:8-20190805.el8
baobabol 80:3.28.0-2.el8
chrome-gnome-shellol 80:10.1-6.el8
evinceol 80:3.28.4-3.el8
evince-browser-pluginol 80:3.28.4-3.el8
evince-libsol 80:3.28.4-3.el8
evince-nautilusol 80:3.28.4-3.el8
file-rollerol 80:3.28.1-2.el8
gdk-pixbuf2ol 80:2.36.12-5.el8
gdk-pixbuf2-develol 80:2.36.12-5.el8
gdk-pixbuf2-modulesol 80:2.36.12-5.el8
gdk-pixbuf2-xlibol 80:2.36.12-5.el8
gdk-pixbuf2-xlib-develol 80:2.36.12-5.el8
gdmol 81:3.28.3-22.el8
gjsol 80:1.56.2-3.el8
gjs-develol 80:1.56.2-3.el8
gnome-classic-sessionol 80:3.32.1-10.el8
gnome-control-centerol 80:3.28.2-5.el8
gnome-control-center-filesystemol 80:3.28.2-5.el8
gnome-desktop3ol 80:3.32.2-1.el8
gnome-desktop3-develol 80:3.32.2-1.el8
gnome-remote-desktopol 80:0.1.6-5.el8
gnome-settings-daemonol 80:3.32.0-4.0.1.el8
gnome-shellol 80:3.32.2-9.el8
gnome-shell-extension-apps-menuol 80:3.32.1-10.el8
gnome-shell-extension-auto-move-windowsol 80:3.32.1-10.el8
gnome-shell-extension-commonol 80:3.32.1-10.el8
gnome-shell-extension-dash-to-dockol 80:3.32.1-10.el8
gnome-shell-extension-desktop-iconsol 80:3.32.1-10.el8
gnome-shell-extension-disable-screenshieldol 80:3.32.1-10.el8
gnome-shell-extension-drive-menuol 80:3.32.1-10.el8
gnome-shell-extension-horizontal-workspacesol 80:3.32.1-10.el8
gnome-shell-extension-launch-new-instanceol 80:3.32.1-10.el8
gnome-shell-extension-native-window-placementol 80:3.32.1-10.el8
gnome-shell-extension-no-hot-cornerol 80:3.32.1-10.el8
gnome-shell-extension-panel-favoritesol 80:3.32.1-10.el8
gnome-shell-extension-places-menuol 80:3.32.1-10.el8
gnome-shell-extension-screenshot-window-sizerol 80:3.32.1-10.el8
gnome-shell-extension-systemMonitorol 80:3.32.1-10.el8
gnome-shell-extension-top-iconsol 80:3.32.1-10.el8
gnome-shell-extension-updates-dialogol 80:3.32.1-10.el8
gnome-shell-extension-user-themeol 80:3.32.1-10.el8
gnome-shell-extension-window-grouperol 80:3.32.1-10.el8
gnome-shell-extension-window-listol 80:3.32.1-10.el8
gnome-shell-extension-windowsNavigatorol 80:3.32.1-10.el8
gnome-shell-extension-workspace-indicatorol 80:3.32.1-10.el8
gnome-softwareol 80:3.30.6-2.el8
gnome-software-editorol 80:3.30.6-2.el8
gnome-tweaksol 80:3.28.1-6.el8
gsettings-desktop-schemasol 80:3.32.0-3.el8
gsettings-desktop-schemas-develol 80:3.32.0-3.el8
gtk-update-icon-cacheol 80:3.22.30-4.el8
gtk3ol 80:3.22.30-4.el8
gtk3-develol 80:3.22.30-4.el8
gtk3-immodule-ximol 80:3.22.30-4.el8
gvfsol 80:1.36.2-6.el8
gvfs-afcol 80:1.36.2-6.el8
gvfs-afpol 80:1.36.2-6.el8
gvfs-archiveol 80:1.36.2-6.el8
gvfs-clientol 80:1.36.2-6.el8
gvfs-develol 80:1.36.2-6.el8
gvfs-fuseol 80:1.36.2-6.el8
gvfs-goaol 80:1.36.2-6.el8
gvfs-gphoto2ol 80:1.36.2-6.el8
gvfs-mtpol 80:1.36.2-6.el8
gvfs-smbol 80:1.36.2-6.el8
libpurpleol 80:2.13.0-5.el8
libpurple-develol 80:2.13.0-5.el8
mozjs60ol 80:60.9.0-3.0.1.el8
mozjs60-develol 80:60.9.0-3.0.1.el8
mutterol 80:3.32.2-10.el8
mutter-develol 80:3.32.2-10.el8
nautilusol 80:3.28.1-10.el8
nautilus-develol 80:3.28.1-10.el8
nautilus-extensionsol 80:3.28.1-10.el8
pangool 80:1.42.4-6.el8
pango-develol 80:1.42.4-6.el8
pidginol 80:2.13.0-5.el8
pidgin-develol 80:2.13.0-5.el8
plymouthol 80:0.9.3-15.0.1.el8
plymouth-core-libsol 80:0.9.3-15.0.1.el8
plymouth-graphics-libsol 80:0.9.3-15.0.1.el8
plymouth-plugin-fade-throbberol 80:0.9.3-15.0.1.el8
plymouth-plugin-labelol 80:0.9.3-15.0.1.el8
plymouth-plugin-scriptol 80:0.9.3-15.0.1.el8
plymouth-plugin-space-flaresol 80:0.9.3-15.0.1.el8
plymouth-plugin-throbgressol 80:0.9.3-15.0.1.el8
plymouth-plugin-two-stepol 80:0.9.3-15.0.1.el8
plymouth-scriptsol 80:0.9.3-15.0.1.el8
plymouth-system-themeol 80:0.9.3-15.0.1.el8
plymouth-theme-chargeol 80:0.9.3-15.0.1.el8
plymouth-theme-fade-inol 80:0.9.3-15.0.1.el8
plymouth-theme-scriptol 80:0.9.3-15.0.1.el8
plymouth-theme-solarol 80:0.9.3-15.0.1.el8
plymouth-theme-spinfinityol 80:0.9.3-15.0.1.el8
plymouth-theme-spinnerol 80:0.9.3-15.0.1.el8
wayland-protocols-develol 80:1.17-1.el8
webkit2gtk3ol 80:2.24.3-1.el8
webkit2gtk3-develol 80:2.24.3-1.el8
webkit2gtk3-jscol 80:2.24.3-1.el8
webkit2gtk3-jsc-develol 80:2.24.3-1.el8
webkit2gtk3-plugin-process-gtk2ol 80:2.24.3-1.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-12795 file-roller: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * evince: uninitialized mem... 7.8 0.0039 None reported
Routine CVE-2019-11459 evince: The tiff_document_render() and tiff_document_get_thumbnail() functions inthe TIFF document backend in GNOME Evince th... 5.5 0.0144 None reported
Showing 1 to 2 of 2 1