RHSA-2018:3140MediumCVSS 7.5

Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

Published
October 30, 2018
Last Modified
November 5, 2026

🔗 CVE IDs covered (15)

CVE-2018-4200 →CVE-2018-12910 →CVE-2015-9381 →CVE-2018-10768 →CVE-2018-11713 →CVE-2015-9382 →CVE-2017-2862 →CVE-2017-18267 →CVE-2018-4204 →CVE-2018-10767 →CVE-2018-11712 →CVE-2018-13988 →CVE-2018-14036 →CVE-2018-4121 →CVE-2018-10733 →

📋 Description

CVE-2015-9381 — freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash CVE-2015-9382 — freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read CVE-2017-2862 — gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function CVE-2017-18267 — poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service CVE-2018-4121 — webkitgtk: memory corruption processing maliciously crafted web content CVE-2018-4200 — webkitgtk: memory corruption processing maliciously crafted web content CVE-2018-4204 — webkitgtk: memory corruption processing maliciously crafted web content CVE-2018-10733 — libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c CVE-2018-10767 — libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c CVE-2018-10768 — poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF CVE-2018-11712 — webkitgtk: Improper TLS certificate verification for WebSocket connections CVE-2018-11713 — webkitgtk: WebSockets don't use system proxy settings CVE-2018-12910 — libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames CVE-2018-13988 — poppler: out of bounds read in pdfunite CVE-2018-14036 — accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

🎯 Affected products200

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)
  • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)
  • PackageKit-0:1.1.10-1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • PackageKit-0:1.1.10-1.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • PackageKit-0:1.1.10-1.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • PackageKit-0:1.1.10-1.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)
  • PackageKit-0:1.1.10-1.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • PackageKit-0:1.1.10-1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 GDM must be restarted for this update to take effect. The X server must be restarted (log out, then log back in) for this update to take effect. The GNOME session must be restarted (log out, then log back in) for this update to take effect. All running instances of Evolution must be restarted for this update to take effect.

🔗 References (210)