Red Hat Security AdvisoryRHSA-2018:0350
gcab security update
Released 2018-02-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gcab-0.7-4.el7_4, libgcab1-0.7-4.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) gcab-0.7-4.el7_4, libgcab1-devel-0.7-4.el7_4
- Red Hat Enterprise Linux ComputeNode (v. 7) gcab-0.7-4.el7_4, libgcab1-0.7-4.el7_4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gcab-0.7-4.el7_4, libgcab1-devel-0.7-4.el7_4
- Red Hat Enterprise Linux Server (v. 7) gcab-0.7-4.el7_4, libgcab1-0.7-4.el7_4, libgcab1-0.7-4.el7_4.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) gcab-0.7-4.el7_4, libgcab1-devel-0.7-4.el7_4, libgcab1-devel-0.7-4.el7_4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) gcab-0.7-4.el7_4, libgcab1-0.7-4.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 7) gcab-0.7-4.el7_4, libgcab1-devel-0.7-4.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) gcab-0.7-4.el7_4, libgcab1-0.7-4.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) gcab-0.7-4.el7_4, libgcab1-devel-0.7-4.el7_4
Fixes 1 record
Priority LOW 38
A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02185 · Published 2018-01-12 · Fixed CWE-787
