Linux · Oracle Linux · Security advisory · November 14, 2019

ELSA-2019-3553: Security update for 107 packages

ELSA-2019-3553, released November 14, 2019, fixes 2 CVEs across 107 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0144
73rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
SDLol 80:1.2.15-35.el8
SDL-develol 80:1.2.15-35.el8
accountsserviceol 80:0.6.50-7.el8
accountsservice-develol 80:0.6.50-7.el8
accountsservice-libsol 80:0.6.50-7.el8
appstream-dataol 80:8-20190805.el8
baobabol 80:3.28.0-2.el8
chrome-gnome-shellol 80:10.1-6.el8
evinceol 80:3.28.4-3.el8
evince-browser-pluginol 80:3.28.4-3.el8
evince-libsol 80:3.28.4-3.el8
evince-nautilusol 80:3.28.4-3.el8
file-rollerol 80:3.28.1-2.el8
gdk-pixbuf2ol 80:2.36.12-5.el8
gdk-pixbuf2-develol 80:2.36.12-5.el8
gdk-pixbuf2-modulesol 80:2.36.12-5.el8
gdk-pixbuf2-xlibol 80:2.36.12-5.el8
gdk-pixbuf2-xlib-develol 80:2.36.12-5.el8
gdmol 81:3.28.3-22.el8
gjsol 80:1.56.2-3.el8
gjs-develol 80:1.56.2-3.el8
gnome-classic-sessionol 80:3.32.1-10.el8
gnome-control-centerol 80:3.28.2-5.el8
gnome-control-center-filesystemol 80:3.28.2-5.el8
gnome-desktop3ol 80:3.32.2-1.el8
gnome-desktop3-develol 80:3.32.2-1.el8
gnome-remote-desktopol 80:0.1.6-5.el8
gnome-settings-daemonol 80:3.32.0-4.0.1.el8
gnome-shellol 80:3.32.2-9.el8
gnome-shell-extension-apps-menuol 80:3.32.1-10.el8
gnome-shell-extension-auto-move-windowsol 80:3.32.1-10.el8
gnome-shell-extension-commonol 80:3.32.1-10.el8
gnome-shell-extension-dash-to-dockol 80:3.32.1-10.el8
gnome-shell-extension-desktop-iconsol 80:3.32.1-10.el8
gnome-shell-extension-disable-screenshieldol 80:3.32.1-10.el8
gnome-shell-extension-drive-menuol 80:3.32.1-10.el8
gnome-shell-extension-horizontal-workspacesol 80:3.32.1-10.el8
gnome-shell-extension-launch-new-instanceol 80:3.32.1-10.el8
gnome-shell-extension-native-window-placementol 80:3.32.1-10.el8
gnome-shell-extension-no-hot-cornerol 80:3.32.1-10.el8
gnome-shell-extension-panel-favoritesol 80:3.32.1-10.el8
gnome-shell-extension-places-menuol 80:3.32.1-10.el8
gnome-shell-extension-screenshot-window-sizerol 80:3.32.1-10.el8
gnome-shell-extension-systemMonitorol 80:3.32.1-10.el8
gnome-shell-extension-top-iconsol 80:3.32.1-10.el8
gnome-shell-extension-updates-dialogol 80:3.32.1-10.el8
gnome-shell-extension-user-themeol 80:3.32.1-10.el8
gnome-shell-extension-window-grouperol 80:3.32.1-10.el8
gnome-shell-extension-window-listol 80:3.32.1-10.el8
gnome-shell-extension-windowsNavigatorol 80:3.32.1-10.el8
gnome-shell-extension-workspace-indicatorol 80:3.32.1-10.el8
gnome-softwareol 80:3.30.6-2.el8
gnome-software-editorol 80:3.30.6-2.el8
gnome-tweaksol 80:3.28.1-6.el8
gsettings-desktop-schemasol 80:3.32.0-3.el8
gsettings-desktop-schemas-develol 80:3.32.0-3.el8
gtk-update-icon-cacheol 80:3.22.30-4.el8
gtk3ol 80:3.22.30-4.el8
gtk3-develol 80:3.22.30-4.el8
gtk3-immodule-ximol 80:3.22.30-4.el8
gvfsol 80:1.36.2-6.el8
gvfs-afcol 80:1.36.2-6.el8
gvfs-afpol 80:1.36.2-6.el8
gvfs-archiveol 80:1.36.2-6.el8
gvfs-clientol 80:1.36.2-6.el8
gvfs-develol 80:1.36.2-6.el8
gvfs-fuseol 80:1.36.2-6.el8
gvfs-goaol 80:1.36.2-6.el8
gvfs-gphoto2ol 80:1.36.2-6.el8
gvfs-mtpol 80:1.36.2-6.el8
gvfs-smbol 80:1.36.2-6.el8
libpurpleol 80:2.13.0-5.el8
libpurple-develol 80:2.13.0-5.el8
mozjs60ol 80:60.9.0-3.0.1.el8
mozjs60-develol 80:60.9.0-3.0.1.el8
mutterol 80:3.32.2-10.el8
mutter-develol 80:3.32.2-10.el8
nautilusol 80:3.28.1-10.el8
nautilus-develol 80:3.28.1-10.el8
nautilus-extensionsol 80:3.28.1-10.el8
pangool 80:1.42.4-6.el8
pango-develol 80:1.42.4-6.el8
pidginol 80:2.13.0-5.el8
pidgin-develol 80:2.13.0-5.el8
plymouthol 80:0.9.3-15.0.1.el8
plymouth-core-libsol 80:0.9.3-15.0.1.el8
plymouth-graphics-libsol 80:0.9.3-15.0.1.el8
plymouth-plugin-fade-throbberol 80:0.9.3-15.0.1.el8
plymouth-plugin-labelol 80:0.9.3-15.0.1.el8
plymouth-plugin-scriptol 80:0.9.3-15.0.1.el8
plymouth-plugin-space-flaresol 80:0.9.3-15.0.1.el8
plymouth-plugin-throbgressol 80:0.9.3-15.0.1.el8
plymouth-plugin-two-stepol 80:0.9.3-15.0.1.el8
plymouth-scriptsol 80:0.9.3-15.0.1.el8
plymouth-system-themeol 80:0.9.3-15.0.1.el8
plymouth-theme-chargeol 80:0.9.3-15.0.1.el8
plymouth-theme-fade-inol 80:0.9.3-15.0.1.el8
plymouth-theme-scriptol 80:0.9.3-15.0.1.el8
plymouth-theme-solarol 80:0.9.3-15.0.1.el8
plymouth-theme-spinfinityol 80:0.9.3-15.0.1.el8
plymouth-theme-spinnerol 80:0.9.3-15.0.1.el8
wayland-protocols-develol 80:1.17-1.el8
webkit2gtk3ol 80:2.24.3-1.el8
webkit2gtk3-develol 80:2.24.3-1.el8
webkit2gtk3-jscol 80:2.24.3-1.el8
webkit2gtk3-jsc-develol 80:2.24.3-1.el8
webkit2gtk3-plugin-process-gtk2ol 80:2.24.3-1.el8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-12795 file-roller: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * evince: uninitialized mem...7.8 0.0039 None reported
Routine CVE-2019-11459 evince: The tiff_document_render() and tiff_document_get_thumbnail() functions inthe TIFF document backend in GNOME Evince th...5.5 0.0144 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.