RHEL 8：GNOME (RHSA-2019:3553)
high Nessus Plugin ID 130552
語系：
概要
遠端 Red Hat 主機缺少一個或多個安全性更新。說明
現已提供適用於 Red Hat Enterprise Linux 8 的 GNOME 更新。Red Hat 產品安全性團隊已將此更新評等為具有低安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。GNOME 是 Red Hat Enterprise Linux 的預設桌面環境。安全性修正：* evince：tiff_document_render() 和 tiff_document_get_thumbnail() 中有未初始化記憶體使用情形 (CVE-2019-11459) * gvfs：gvfsd 的 daemon/gvfsdaemon.c 中有不當授權情形 (CVE-2019-12795) 如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。其他變更：如需有關此發行版本的詳細變更資訊，請參閱可從〈參照〉一節連結的 Red Hat Enterprise Linux 8.1 版本資訊。解決方案
更新受影響的套件。另請參閱
http://www.nessus.org/u?b6fbb2f3
http://www.nessus.org/u?b8d3b26b
https://access.redhat.com/errata/RHSA-2019:3553
https://access.redhat.com/security/updates/classification/#low
https://bugzilla.redhat.com/show_bug.cgi?id=1662193
https://bugzilla.redhat.com/show_bug.cgi?id=1667136
https://bugzilla.redhat.com/show_bug.cgi?id=1673011
https://bugzilla.redhat.com/show_bug.cgi?id=1674382
https://bugzilla.redhat.com/show_bug.cgi?id=1679127
https://bugzilla.redhat.com/show_bug.cgi?id=1680164
https://bugzilla.redhat.com/show_bug.cgi?id=1685811
https://bugzilla.redhat.com/show_bug.cgi?id=1687949
https://bugzilla.redhat.com/show_bug.cgi?id=1690506
https://bugzilla.redhat.com/show_bug.cgi?id=1696708
https://bugzilla.redhat.com/show_bug.cgi?id=1698520
https://bugzilla.redhat.com/show_bug.cgi?id=1698884
https://bugzilla.redhat.com/show_bug.cgi?id=1698923
https://bugzilla.redhat.com/show_bug.cgi?id=1698929
https://bugzilla.redhat.com/show_bug.cgi?id=1698930
https://bugzilla.redhat.com/show_bug.cgi?id=1704355
https://bugzilla.redhat.com/show_bug.cgi?id=1704360
https://bugzilla.redhat.com/show_bug.cgi?id=1704378
https://bugzilla.redhat.com/show_bug.cgi?id=1705583
https://bugzilla.redhat.com/show_bug.cgi?id=1706793
https://bugzilla.redhat.com/show_bug.cgi?id=1709937
https://bugzilla.redhat.com/show_bug.cgi?id=1713080
https://bugzilla.redhat.com/show_bug.cgi?id=1713330
https://bugzilla.redhat.com/show_bug.cgi?id=1713453
https://bugzilla.redhat.com/show_bug.cgi?id=1713685
https://bugzilla.redhat.com/show_bug.cgi?id=1715738
https://bugzilla.redhat.com/show_bug.cgi?id=1715761
https://bugzilla.redhat.com/show_bug.cgi?id=1715765
https://bugzilla.redhat.com/show_bug.cgi?id=1716295
https://bugzilla.redhat.com/show_bug.cgi?id=1716771
https://bugzilla.redhat.com/show_bug.cgi?id=1718133
https://bugzilla.redhat.com/show_bug.cgi?id=1719241
https://bugzilla.redhat.com/show_bug.cgi?id=1719279
https://bugzilla.redhat.com/show_bug.cgi?id=1719779
https://bugzilla.redhat.com/show_bug.cgi?id=1720481
https://bugzilla.redhat.com/show_bug.cgi?id=1721195
https://bugzilla.redhat.com/show_bug.cgi?id=1721575
https://bugzilla.redhat.com/show_bug.cgi?id=1722047
https://bugzilla.redhat.com/show_bug.cgi?id=1722844
https://bugzilla.redhat.com/show_bug.cgi?id=1723467
https://bugzilla.redhat.com/show_bug.cgi?id=1723836
https://bugzilla.redhat.com/show_bug.cgi?id=1724551
https://bugzilla.redhat.com/show_bug.cgi?id=1725101
https://bugzilla.redhat.com/show_bug.cgi?id=1725107
https://bugzilla.redhat.com/show_bug.cgi?id=1725120
https://bugzilla.redhat.com/show_bug.cgi?id=1725555
https://bugzilla.redhat.com/show_bug.cgi?id=1725741
https://bugzilla.redhat.com/show_bug.cgi?id=1725766
https://bugzilla.redhat.com/show_bug.cgi?id=1725854
https://bugzilla.redhat.com/show_bug.cgi?id=1726093
https://bugzilla.redhat.com/show_bug.cgi?id=1726505
https://bugzilla.redhat.com/show_bug.cgi?id=1726656
https://bugzilla.redhat.com/show_bug.cgi?id=1728277
https://bugzilla.redhat.com/show_bug.cgi?id=1731372
https://bugzilla.redhat.com/show_bug.cgi?id=1735382
https://bugzilla.redhat.com/show_bug.cgi?id=1737326
https://bugzilla.redhat.com/show_bug.cgi?id=1739116
Plugin 詳細資訊
嚴重性: High
ID: 130552
檔案名稱: redhat-RHSA-2019-3553.nasl
版本: 1.5
類型: local
代理程式: unix
已發布: 2019/11/6
已更新: 2024/4/28
支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
風險資訊
VPR
風險因素: High
分數: 7.4
CVSS v2
風險因素: High
基本分數: 9.3
時間分數: 7.7
媒介: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2019-8689
CVSS v3
風險因素: High
基本分數: 8.8
時間分數: 8.2
媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:F/RL:O/RC:C
CVSS 評分資料來源: CVE-2019-8735
弱點資訊
CPE: p-cpe:/a:redhat:enterprise_linux:sdl, p-cpe:/a:redhat:enterprise_linux:sdl-devel, p-cpe:/a:redhat:enterprise_linux:accountsservice, p-cpe:/a:redhat:enterprise_linux:accountsservice-devel, p-cpe:/a:redhat:enterprise_linux:accountsservice-libs, p-cpe:/a:redhat:enterprise_linux:appstream-data, p-cpe:/a:redhat:enterprise_linux:baobab, p-cpe:/a:redhat:enterprise_linux:chrome-gnome-shell, p-cpe:/a:redhat:enterprise_linux:evince, p-cpe:/a:redhat:enterprise_linux:evince-browser-plugin, p-cpe:/a:redhat:enterprise_linux:evince-libs, p-cpe:/a:redhat:enterprise_linux:evince-nautilus, p-cpe:/a:redhat:enterprise_linux:file-roller, p-cpe:/a:redhat:enterprise_linux:gdk-pixbuf2, p-cpe:/a:redhat:enterprise_linux:gdk-pixbuf2-devel, p-cpe:/a:redhat:enterprise_linux:gdk-pixbuf2-modules, p-cpe:/a:redhat:enterprise_linux:gdk-pixbuf2-xlib, p-cpe:/a:redhat:enterprise_linux:gdk-pixbuf2-xlib-devel, p-cpe:/a:redhat:enterprise_linux:gdm, p-cpe:/a:redhat:enterprise_linux:gjs, p-cpe:/a:redhat:enterprise_linux:gjs-devel, p-cpe:/a:redhat:enterprise_linux:gnome-classic-session, p-cpe:/a:redhat:enterprise_linux:gnome-control-center, p-cpe:/a:redhat:enterprise_linux:gnome-control-center-filesystem, p-cpe:/a:redhat:enterprise_linux:gnome-desktop3, p-cpe:/a:redhat:enterprise_linux:gnome-desktop3-devel, p-cpe:/a:redhat:enterprise_linux:gnome-remote-desktop, p-cpe:/a:redhat:enterprise_linux:gnome-settings-daemon, p-cpe:/a:redhat:enterprise_linux:gnome-shell, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-apps-menu, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-auto-move-windows, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-common, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-dash-to-dock, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-desktop-icons, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-disable-screenshield, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-drive-menu, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-horizontal-workspaces, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-launch-new-instance, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-native-window-placement, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-no-hot-corner, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-panel-favorites, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-places-menu, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-screenshot-window-sizer, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-systemmonitor, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-top-icons, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-updates-dialog, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-user-theme, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-window-grouper, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-window-list, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-windowsnavigator, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extension-workspace-indicator, p-cpe:/a:redhat:enterprise_linux:gnome-shell-extensions, p-cpe:/a:redhat:enterprise_linux:gnome-software, p-cpe:/a:redhat:enterprise_linux:gnome-software-editor, p-cpe:/a:redhat:enterprise_linux:gnome-tweaks, p-cpe:/a:redhat:enterprise_linux:gsettings-desktop-schemas, p-cpe:/a:redhat:enterprise_linux:gsettings-desktop-schemas-devel, p-cpe:/a:redhat:enterprise_linux:gtk-update-icon-cache, p-cpe:/a:redhat:enterprise_linux:gtk3, p-cpe:/a:redhat:enterprise_linux:gtk3-devel, p-cpe:/a:redhat:enterprise_linux:gtk3-immodule-xim, p-cpe:/a:redhat:enterprise_linux:gvfs, p-cpe:/a:redhat:enterprise_linux:gvfs-afc, p-cpe:/a:redhat:enterprise_linux:gvfs-afp, p-cpe:/a:redhat:enterprise_linux:gvfs-archive, p-cpe:/a:redhat:enterprise_linux:gvfs-client, p-cpe:/a:redhat:enterprise_linux:gvfs-devel, p-cpe:/a:redhat:enterprise_linux:gvfs-fuse, p-cpe:/a:redhat:enterprise_linux:gvfs-goa, p-cpe:/a:redhat:enterprise_linux:gvfs-gphoto2, p-cpe:/a:redhat:enterprise_linux:gvfs-mtp, p-cpe:/a:redhat:enterprise_linux:gvfs-smb, p-cpe:/a:redhat:enterprise_linux:libpurple, p-cpe:/a:redhat:enterprise_linux:libpurple-devel, p-cpe:/a:redhat:enterprise_linux:mozjs60, p-cpe:/a:redhat:enterprise_linux:mozjs60-devel, p-cpe:/a:redhat:enterprise_linux:mutter, p-cpe:/a:redhat:enterprise_linux:mutter-devel, p-cpe:/a:redhat:enterprise_linux:nautilus, p-cpe:/a:redhat:enterprise_linux:nautilus-devel, p-cpe:/a:redhat:enterprise_linux:nautilus-extensions, p-cpe:/a:redhat:enterprise_linux:pango, p-cpe:/a:redhat:enterprise_linux:pango-devel, p-cpe:/a:redhat:enterprise_linux:pidgin, p-cpe:/a:redhat:enterprise_linux:pidgin-devel, p-cpe:/a:redhat:enterprise_linux:plymouth, p-cpe:/a:redhat:enterprise_linux:plymouth-core-libs, p-cpe:/a:redhat:enterprise_linux:plymouth-graphics-libs, p-cpe:/a:redhat:enterprise_linux:plymouth-plugin-fade-throbber, p-cpe:/a:redhat:enterprise_linux:plymouth-plugin-label, p-cpe:/a:redhat:enterprise_linux:plymouth-plugin-script, p-cpe:/a:redhat:enterprise_linux:plymouth-plugin-space-flares, p-cpe:/a:redhat:enterprise_linux:plymouth-plugin-throbgress, p-cpe:/a:redhat:enterprise_linux:plymouth-plugin-two-step, p-cpe:/a:redhat:enterprise_linux:plymouth-scripts, p-cpe:/a:redhat:enterprise_linux:plymouth-system-theme, p-cpe:/a:redhat:enterprise_linux:plymouth-theme-charge, p-cpe:/a:redhat:enterprise_linux:plymouth-theme-fade-in, p-cpe:/a:redhat:enterprise_linux:plymouth-theme-script, p-cpe:/a:redhat:enterprise_linux:plymouth-theme-solar, p-cpe:/a:redhat:enterprise_linux:plymouth-theme-spinfinity, p-cpe:/a:redhat:enterprise_linux:plymouth-theme-spinner, p-cpe:/a:redhat:enterprise_linux:wayland-protocols, p-cpe:/a:redhat:enterprise_linux:wayland-protocols-devel, p-cpe:/a:redhat:enterprise_linux:webkit2gtk3, p-cpe:/a:redhat:enterprise_linux:webkit2gtk3-devel, p-cpe:/a:redhat:enterprise_linux:webkit2gtk3-jsc, p-cpe:/a:redhat:enterprise_linux:webkit2gtk3-jsc-devel, p-cpe:/a:redhat:enterprise_linux:webkit2gtk3-plugin-process-gtk2, cpe:/o:redhat:enterprise_linux:8
必要的 KB 項目: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2019/11/5
弱點發布日期: 2019/4/22
CISA 已知遭惡意利用弱點到期日: 2022/5/25
參考資訊
CVE: CVE-2019-11070, CVE-2019-11459, CVE-2019-12795, CVE-2019-3820, CVE-2019-6237, CVE-2019-6251, CVE-2019-8506, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8607, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8666, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8676, CVE-2019-8677, CVE-2019-8679, CVE-2019-8681, CVE-2019-8686, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690, CVE-2019-8726, CVE-2019-8735, CVE-2019-8768