RLSA-2019:3553 — Low: GNOME security, bug fix, and enhancement update

Summary

GNOME is the default desktop environment of Rocky Linux.

Security Fix(es):

* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)

* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

Fixed packages 4

Release	Package	Fixed in
Rocky Linux · 8	gdk-pixbuf2	0:2.36.12-5.el8
Rocky Linux · 8	gnome-desktop3	0:3.32.2-1.el8
Rocky Linux · 8	pango	0:1.42.4-6.el8
Rocky Linux · 8	pidgin	0:2.13.0-5.el8

Vulnerabilities 51

High 8.8

CVE-2019-8506 Exploited Public exploit EPSS 16%

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
KEV May 4, 2022
Medium 4.8

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actio…

The Gnome Project gnome-shell gnome-shell gnome-shell Debian Ubuntu

Feb 6, 2019
Unscored —

CVE-2019-11070

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloadi…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Apr 10, 2019
Unscored —

CVE-2019-11459

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince thr…

evince atril atril evince Debian Ubuntu Alpine

Apr 22, 2019
Unscored —

CVE-2019-12795

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a pri…

gvfs gvfs gvfs Debian Ubuntu Alpine

Jun 11, 2019
Unscored —

CVE-2019-6237

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirec…

webkit2gtk webkit2gtk webkit2gtk Debian Ubuntu Alpine

Jan 14, 2019
Unscored —

CVE-2019-8518 Public exploit EPSS 11%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8523

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8524

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8535

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Saf…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8536

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8544

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8551

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 1…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8558 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8559

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8563

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8571

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8583

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8584

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8586

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8587

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8594

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8595

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8596

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8597

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8601 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14…

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8608

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8609

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8610

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8611 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8615

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8619

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8622 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8623 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8666

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8671 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8672 Public exploit EPSS 11%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8673

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8676

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8677

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8679

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8681

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8686

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8687

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8689 Public exploit EPSS 14%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8690 Public exploit

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8726

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …

Apple tvOS iTunes for Windows iCloud for Windows Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8735

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …

Apple tvOS iTunes for Windows iCloud for Windows Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8768

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This i…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Alpine

Dec 18, 2019

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=1662193
report
https://bugzilla.redhat.com/show_bug.cgi?id=1667136
report
https://bugzilla.redhat.com/show_bug.cgi?id=1673011
report
https://bugzilla.redhat.com/show_bug.cgi?id=1674382
report
https://bugzilla.redhat.com/show_bug.cgi?id=1679127
report
https://bugzilla.redhat.com/show_bug.cgi?id=1680164
report
https://bugzilla.redhat.com/show_bug.cgi?id=1685811
report
https://bugzilla.redhat.com/show_bug.cgi?id=1687949
report
https://bugzilla.redhat.com/show_bug.cgi?id=1690506
report
https://bugzilla.redhat.com/show_bug.cgi?id=1696708
report
https://bugzilla.redhat.com/show_bug.cgi?id=1698520
report
https://bugzilla.redhat.com/show_bug.cgi?id=1698884
report
https://bugzilla.redhat.com/show_bug.cgi?id=1698923
report
https://bugzilla.redhat.com/show_bug.cgi?id=1698929
report
https://bugzilla.redhat.com/show_bug.cgi?id=1698930
report
https://bugzilla.redhat.com/show_bug.cgi?id=1704355
report
https://bugzilla.redhat.com/show_bug.cgi?id=1704360
report
https://bugzilla.redhat.com/show_bug.cgi?id=1704378
report
https://bugzilla.redhat.com/show_bug.cgi?id=1705583
report
https://bugzilla.redhat.com/show_bug.cgi?id=1706793
report
https://bugzilla.redhat.com/show_bug.cgi?id=1709937
report
https://bugzilla.redhat.com/show_bug.cgi?id=1713080
report
https://bugzilla.redhat.com/show_bug.cgi?id=1713330
report
https://bugzilla.redhat.com/show_bug.cgi?id=1713453
report
https://bugzilla.redhat.com/show_bug.cgi?id=1713685
report
https://bugzilla.redhat.com/show_bug.cgi?id=1715738
report
https://bugzilla.redhat.com/show_bug.cgi?id=1715761
report
https://bugzilla.redhat.com/show_bug.cgi?id=1715765
report
https://bugzilla.redhat.com/show_bug.cgi?id=1716295
report
https://bugzilla.redhat.com/show_bug.cgi?id=1716771
report
https://bugzilla.redhat.com/show_bug.cgi?id=1718133
report
https://bugzilla.redhat.com/show_bug.cgi?id=1719241
report
https://bugzilla.redhat.com/show_bug.cgi?id=1719279
report
https://bugzilla.redhat.com/show_bug.cgi?id=1719779
report
https://bugzilla.redhat.com/show_bug.cgi?id=1720481
report
https://bugzilla.redhat.com/show_bug.cgi?id=1721195
report
https://bugzilla.redhat.com/show_bug.cgi?id=1721575
report
https://bugzilla.redhat.com/show_bug.cgi?id=1722047
report
https://bugzilla.redhat.com/show_bug.cgi?id=1722844

Low: GNOME security, bug fix, and enhancement update

Summary

Fixed packages 4

Vulnerabilities 51

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actio…

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloadi…

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince thr…

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a pri…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirec…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Saf…

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This i…

References