Linux · Security advisory · November 5, 2019
RHSA-2019:3553: Security update for 107 packages
RHSA-2019:3553, released November 5, 2019, fixes 51 CVEs across 107 products. One of them is being exploited (CVE-2019-8506); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
51
None rated Critical
Exploited
1
CVE-2019-8506
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1616
96th percentile
Priority of the 51 CVEs
Patch now 1
Urgent 0
High 42
Routine 8
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| SDL | RHEL 8 | 0:1.2.15-35.el8 |
| SDL-devel | RHEL 8 | 0:1.2.15-35.el8 |
| accountsservice | RHEL 8 | 0:0.6.50-7.el8 |
| accountsservice-devel | RHEL 8 | 0:0.6.50-7.el8 |
| accountsservice-libs | RHEL 8 | 0:0.6.50-7.el8 |
| appstream-data | RHEL 8 | 0:8-20190805.el8 |
| baobab | RHEL 8 | 0:3.28.0-2.el8 |
| chrome-gnome-shell | RHEL 8 | 0:10.1-6.el8 |
| evince | RHEL 8 | 0:3.28.4-3.el8 |
| evince-browser-plugin | RHEL 8 | 0:3.28.4-3.el8 |
| evince-libs | RHEL 8 | 0:3.28.4-3.el8 |
| evince-nautilus | RHEL 8 | 0:3.28.4-3.el8 |
| file-roller | RHEL 8 | 0:3.28.1-2.el8 |
| gdk-pixbuf2 | RHEL 8 | 0:2.36.12-5.el8 |
| gdk-pixbuf2-devel | RHEL 8 | 0:2.36.12-5.el8 |
| gdk-pixbuf2-modules | RHEL 8 | 0:2.36.12-5.el8 |
| gdk-pixbuf2-xlib | RHEL 8 | 0:2.36.12-5.el8 |
| gdk-pixbuf2-xlib-devel | RHEL 8 | 0:2.36.12-5.el8 |
| gdm | RHEL 8 | 1:3.28.3-22.el8 |
| gjs | RHEL 8 | 0:1.56.2-3.el8 |
| gjs-devel | RHEL 8 | 0:1.56.2-3.el8 |
| gnome-classic-session | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-control-center | RHEL 8 | 0:3.28.2-5.el8 |
| gnome-control-center-filesystem | RHEL 8 | 0:3.28.2-5.el8 |
| gnome-desktop3 | RHEL 8 | 0:3.32.2-1.el8 |
| gnome-desktop3-devel | RHEL 8 | 0:3.32.2-1.el8 |
| gnome-remote-desktop | RHEL 8 | 0:0.1.6-5.el8 |
| gnome-settings-daemon | RHEL 8 | 0:3.32.0-4.el8 |
| gnome-shell | RHEL 8 | 0:3.32.2-9.el8 |
| gnome-shell-extension-apps-menu | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-auto-move-windows | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-common | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-dash-to-dock | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-desktop-icons | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-disable-screenshield | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-drive-menu | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-horizontal-workspaces | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-launch-new-instance | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-native-window-placement | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-no-hot-corner | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-panel-favorites | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-places-menu | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-screenshot-window-sizer | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-systemMonitor | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-top-icons | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-updates-dialog | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-user-theme | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-window-grouper | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-window-list | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-windowsNavigator | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-shell-extension-workspace-indicator | RHEL 8 | 0:3.32.1-10.el8 |
| gnome-software | RHEL 8 | 0:3.30.6-2.el8 |
| gnome-software-editor | RHEL 8 | 0:3.30.6-2.el8 |
| gnome-tweaks | RHEL 8 | 0:3.28.1-6.el8 |
| gsettings-desktop-schemas | RHEL 8 | 0:3.32.0-3.el8 |
| gsettings-desktop-schemas-devel | RHEL 8 | 0:3.32.0-3.el8 |
| gtk-update-icon-cache | RHEL 8 | 0:3.22.30-4.el8 |
| gtk3 | RHEL 8 | 0:3.22.30-4.el8 |
| gtk3-devel | RHEL 8 | 0:3.22.30-4.el8 |
| gtk3-immodule-xim | RHEL 8 | 0:3.22.30-4.el8 |
| gvfs | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-afc | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-afp | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-archive | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-client | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-devel | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-fuse | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-goa | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-gphoto2 | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-mtp | RHEL 8 | 0:1.36.2-6.el8 |
| gvfs-smb | RHEL 8 | 0:1.36.2-6.el8 |
| libpurple | RHEL 8 | 0:2.13.0-5.el8 |
| libpurple-devel | RHEL 8 | 0:2.13.0-5.el8 |
| mozjs60 | RHEL 8 | 0:60.9.0-3.el8 |
| mozjs60-devel | RHEL 8 | 0:60.9.0-3.el8 |
| mutter | RHEL 8 | 0:3.32.2-10.el8 |
| mutter-devel | RHEL 8 | 0:3.32.2-10.el8 |
| nautilus | RHEL 8 | 0:3.28.1-10.el8 |
| nautilus-devel | RHEL 8 | 0:3.28.1-10.el8 |
| nautilus-extensions | RHEL 8 | 0:3.28.1-10.el8 |
| pango | RHEL 8 | 0:1.42.4-6.el8 |
| pango-devel | RHEL 8 | 0:1.42.4-6.el8 |
| pidgin | RHEL 8 | 0:2.13.0-5.el8 |
| pidgin-devel | RHEL 8 | 0:2.13.0-5.el8 |
| plymouth | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-core-libs | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-graphics-libs | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-plugin-fade-throbber | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-plugin-label | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-plugin-script | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-plugin-space-flares | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-plugin-throbgress | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-plugin-two-step | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-scripts | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-system-theme | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-theme-charge | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-theme-fade-in | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-theme-script | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-theme-solar | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-theme-spinfinity | RHEL 8 | 0:0.9.3-15.el8 |
| plymouth-theme-spinner | RHEL 8 | 0:0.9.3-15.el8 |
| wayland-protocols-devel | RHEL 8 | 0:1.17-1.el8 |
| webkit2gtk3 | RHEL 8 | 0:2.24.3-1.el8 |
| webkit2gtk3-devel | RHEL 8 | 0:2.24.3-1.el8 |
| webkit2gtk3-jsc | RHEL 8 | 0:2.24.3-1.el8 |
| webkit2gtk3-jsc-devel | RHEL 8 | 0:2.24.3-1.el8 |
| webkit2gtk3-plugin-process-gtk2 | RHEL 8 | 0:2.24.3-1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2019-8506 | Apple Multiple Products Type Confusion Vulnerability | 8.8 | 0.1616 | KEVExploited | |
| High | CVE-2019-8689 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.1364 | None reported | |
| High | CVE-2019-8518 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.1119 | None reported | |
| High | CVE-2019-8672 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.1111 | None reported | |
| High | CVE-2019-8611 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0848 | None reported | |
| High | CVE-2019-8671 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0848 | None reported | |
| High | CVE-2019-8622 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0835 | None reported | |
| High | CVE-2019-8623 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0835 | None reported | |
| High | CVE-2019-8558 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0754 | None reported | |
| High | CVE-2019-8601 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0405 | None reported | |
| High | CVE-2019-8676 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0248 | None reported | |
| High | CVE-2019-8544 | iTunes: A memory corruption issue was addressed with improved memory handling. | 8.8 | 0.0235 | None reported | |
| High | CVE-2019-8535 | iTunes: A memory corruption issue was addressed with improved state management. | 8.8 | 0.0219 | None reported | |
| High | CVE-2019-8523 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0218 | None reported | |
| High | CVE-2019-8536 | iTunes: A memory corruption issue was addressed with improved memory handling. | 8.8 | 0.0208 | None reported | |
| High | CVE-2019-8597 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0206 | None reported | |
| High | CVE-2019-8615 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0206 | None reported | |
| High | CVE-2019-8583 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0201 | None reported | |
| High | CVE-2019-8596 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0200 | None reported | |
| High | CVE-2019-8609 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0200 | None reported | |
| High | CVE-2019-8610 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0200 | None reported | |
| High | CVE-2019-8673 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0200 | None reported | |
| High | CVE-2019-6237 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0196 | None reported | |
| High | CVE-2019-8584 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0196 | None reported | |
| High | CVE-2019-8586 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0196 | None reported |
Showing 1 to 25 of 51
1Next