{"id":"ALSA-2019:3553","summary":"Low: GNOME security, bug fix, and enhancement update","details":"GNOME is the default desktop environment of AlmaLinux.\n\nSecurity Fix(es):\n\n* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)\n\n* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","modified":"2026-11-05T12:15:06.930644345Z","published":"2019-11-05T17:59:21Z","related":["CVE-2019-11070","CVE-2019-11459","CVE-2019-12795","CVE-2019-3820","CVE-2019-6237","CVE-2019-6251","CVE-2019-8506","CVE-2019-8518","CVE-2019-8523","CVE-2019-8524","CVE-2019-8535","CVE-2019-8536","CVE-2019-8544","CVE-2019-8551","CVE-2019-8558","CVE-2019-8559","CVE-2019-8563","CVE-2019-8571","CVE-2019-8583","CVE-2019-8584","CVE-2019-8586","CVE-2019-8587","CVE-2019-8594","CVE-2019-8595","CVE-2019-8596","CVE-2019-8597","CVE-2019-8601","CVE-2019-8607","CVE-2019-8608","CVE-2019-8609","CVE-2019-8610","CVE-2019-8611","CVE-2019-8615","CVE-2019-8619","CVE-2019-8622","CVE-2019-8623","CVE-2019-8666","CVE-2019-8671","CVE-2019-8672","CVE-2019-8673","CVE-2019-8676","CVE-2019-8677","CVE-2019-8679","CVE-2019-8681","CVE-2019-8686","CVE-2019-8687","CVE-2019-8689","CVE-2019-8690","CVE-2019-8726","CVE-2019-8735","CVE-2019-8768"],"upstream":["CVE-2019-11070","CVE-2019-11459","CVE-2019-12795","CVE-2019-3820","CVE-2019-6237","CVE-2019-6251","CVE-2019-8506","CVE-2019-8518","CVE-2019-8523","CVE-2019-8524","CVE-2019-8535","CVE-2019-8536","CVE-2019-8544","CVE-2019-8551","CVE-2019-8558","CVE-2019-8559","CVE-2019-8563","CVE-2019-8571","CVE-2019-8583","CVE-2019-8584","CVE-2019-8586","CVE-2019-8587","CVE-2019-8594","CVE-2019-8595","CVE-2019-8596","CVE-2019-8597","CVE-2019-8601","CVE-2019-8607","CVE-2019-8608","CVE-2019-8609","CVE-2019-8610","CVE-2019-8611","CVE-2019-8615","CVE-2019-8619","CVE-2019-8622","CVE-2019-8623","CVE-2019-8666","CVE-2019-8671","CVE-2019-8672","CVE-2019-8673","CVE-2019-8676","CVE-2019-8677","CVE-2019-8679","CVE-2019-8681","CVE-2019-8686","CVE-2019-8687","CVE-2019-8689","CVE-2019-8690","CVE-2019-8726","CVE-2019-8735","CVE-2019-8768"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3553"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1662193"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1667136"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1667409"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1669391"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1673011"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1674382"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1679127"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1680164"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1685811"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1687949"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1690506"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1696708"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1698520"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1698884"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1698923"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1698929"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1698930"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1704355"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1704360"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1704378"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1705583"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1706793"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1709289"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1709937"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1713080"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1713330"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1713453"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1713685"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1715738"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1715761"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1715765"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1716295"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1716771"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1718133"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719199"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719206"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719208"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719209"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719210"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719213"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719224"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719231"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719235"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719237"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719238"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719241"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719279"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1719779"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1720481"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1721195"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1721575"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1722047"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1722844"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1723467"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1723836"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1724551"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1725101"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1725107"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1725120"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1725555"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1725741"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1725766"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1725854"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1726093"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1726505"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1726656"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1728277"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1731372"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1735382"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1737326"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1739116"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1739117"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1741547"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876612"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876614"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876616"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876630"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876632"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876634"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876643"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876644"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876645"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876647"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876650"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876653"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876655"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876657"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876664"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876880"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876881"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876882"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876883"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876884"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876887"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876891"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876892"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876893"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876894"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876895"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876897"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876898"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876899"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1876900"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1877045"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1877046"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1877047"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1877048"},{"type":"REPORT","url":"https://bugzilla.redhat.com/1877049"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2019-3553.html"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-11070"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-11459"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-12795"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-3820"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-6237"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-6251"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8506"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8518"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8523"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8524"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8535"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8536"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8544"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8551"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8558"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8559"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8563"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8571"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8583"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8584"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8586"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8587"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8594"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8595"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8596"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8597"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8601"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8607"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8608"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8609"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8610"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8611"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8615"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8619"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8622"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8623"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8666"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8671"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8672"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8673"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8676"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8677"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8679"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8681"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8686"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8687"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8689"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8690"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8726"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8735"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2019-8768"}],"affected":[{"package":{"name":"gdk-pixbuf2","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gdk-pixbuf2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.12-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"gdk-pixbuf2-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gdk-pixbuf2-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.12-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"gdk-pixbuf2-modules","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gdk-pixbuf2-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.12-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"gdk-pixbuf2-xlib","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gdk-pixbuf2-xlib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.12-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"gdk-pixbuf2-xlib-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gdk-pixbuf2-xlib-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.12-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"gnome-desktop3","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gnome-desktop3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"gnome-desktop3-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gnome-desktop3-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"libpurple","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libpurple"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"libpurple-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libpurple-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"pidgin","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pidgin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}},{"package":{"name":"pidgin-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pidgin-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-5.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2019:3553.json"}}],"schema_version":"1.9.2"}