TI-2018-03077 CVE-2018-4121 · GHSA-pg93-h5rr-phmm
Memory corruption in Apple WebKit
Priority MEDIUM 53
An issue was discovered in certain Apple products.
RHSA-2018:3140
GNOME security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) PackageKit-1.1.10-1.el7, PackageKit-command-not-found-1.1.10-1.el7, PackageKit-glib-1.1.10-1.el7 +47
- Red Hat Enterprise Linux Client Optional (v. 7) PackageKit-1.1.10-1.el7, PackageKit-cron-1.1.10-1.el7, PackageKit-glib-devel-1.1.10-1.el7 +47
- Red Hat Enterprise Linux ComputeNode (v. 7) PackageKit-1.1.10-1.el7, PackageKit-glib-1.1.10-1.el7, adwaita-cursor-theme-3.28.0-1.el7 +47
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) PackageKit-1.1.10-1.el7, PackageKit-command-not-found-1.1.10-1.el7, PackageKit-cron-1.1.10-1.el7 +47
- Red Hat Enterprise Linux Server (v. 7) PackageKit-1.1.10-1.el7, PackageKit-command-not-found-1.1.10-1.el7, PackageKit-glib-1.1.10-1.el7 +47
- Red Hat Enterprise Linux Server Optional (v. 7) PackageKit-1.1.10-1.el7, PackageKit-1.1.10-1.el7.ppc, PackageKit-cron-1.1.10-1.el7 +47
- Red Hat Enterprise Linux Workstation (v. 7) PackageKit-1.1.10-1.el7, PackageKit-command-not-found-1.1.10-1.el7, PackageKit-glib-1.1.10-1.el7 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) PackageKit-1.1.10-1.el7, PackageKit-cron-1.1.10-1.el7, PackageKit-glib-devel-1.1.10-1.el7 +47
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) PackageKit-1.1.10-1.el7, PackageKit-command-not-found-1.1.10-1.el7, PackageKit-glib-1.1.10-1.el7 +47
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) PackageKit-1.1.10-1.el7, PackageKit-cron-1.1.10-1.el7, PackageKit-glib-devel-1.1.10-1.el7 +47
Fixes 15 records
TI-2018-03155 CVE-2018-4200 · GHSA-xpr5-5ww3-6f66
Use after free in Apple WebKit
Priority MEDIUM 50
An issue was discovered in certain Apple products.
TI-2018-09275 CVE-2018-12910 · GHSA-wv8f-jq6c-45j5
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have…
Priority MEDIUM 49
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
TI-2018-03159 CVE-2018-4204 · GHSA-7r88-6c88-qv7w
Memory corruption in Apple WebKit
Priority MEDIUM 44
An issue was discovered in certain Apple products.
TI-2015-07758 CVE-2015-9381 · GHSA-jjq3-c7h5-j694
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
Priority MEDIUM 42
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
TI-2017-02082 CVE-2017-2862 · GHSA-cmxv-cq8h-57g4
Out-of-bounds write in GNOME Gdk-Pixbuf
Priority MEDIUM 41
An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6.
TI-2018-08376 CVE-2018-11712 · GHSA-2c7h-c396-x7rf
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network…
Priority LOW 35
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connec…
TI-2018-10143 CVE-2018-14036 · GHSA-2pjf-fjvv-2rf2
Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of…
Priority LOW 34
Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.
TI-2018-10107 CVE-2018-13988 · GHSA-hj59-vghc-34x7
Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect…
Priority LOW 34
Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite.
TI-2018-07615 CVE-2018-10768 · GHSA-vj6w-p4m3-pj3w
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h…
Priority LOW 33
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5.
TI-2018-07614 CVE-2018-10767 · GHSA-fg6g-g2cv-hgpf
There is a stack-based buffer over-read in calling GLib in the function…
Priority LOW 33
There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_rea…
TI-2018-07592 CVE-2018-10733 · GHSA-8r7v-mcwp-4qfm
There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c…
Priority LOW 33
There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0.
TI-2018-08377 CVE-2018-11713 · GHSA-q6g9-cxvx-7pq9
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network…
Priority LOW 32
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy sett…
TI-2015-07759 CVE-2015-9382 · GHSA-mvvp-jc53-vjxq
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because…
Priority LOW 32
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
TI-2017-13452 CVE-2017-18267 · GHSA-j788-f9fx-qmj8
The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows…
Priority LOW 29
The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.