CVE-2018-14036

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an...

6.5 MediumFix available

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

3.05%Up 1.8 points since Apr 14, 2021

What each source reports

NVD Score used 6.5

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Record: CVE-2018-14036
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Record: CVE-2018-14036
Updated: 2026-11-02

EUVDEUVD-2018-5966 No score

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Record: EUVD-2018-5966
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2pjf-fjvv-2rf2 6.5

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an...

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Record: GHSA-2pjf-fjvv-2rf2
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

OSV 6.5

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Record: CVE-2018-14036
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2018-14036 6.5

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Record: DEBIAN-CVE-2018-14036
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

Show 7 moreShow less

OSVRHSA-2018:3140 7.5

Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

Record: RHSA-2018:3140
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2018-14036 6.5

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

Record: UBUNTU-CVE-2018-14036
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10611-1 No score

accountsservice-0.6.55-8.2 on GA media

These are all security issues fixed in the accountsservice-0.6.55-8.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10611-1
Updated: 2026-11-02

OSVSUSE-SU-2018:3625-1 No score

Security update for accountsservice

This update for accountsservice fixes the following issues:

This security issue was fixed:

CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in user_change_icon_file_authorized_cb() (bsc#1099699)

Thsese non-security issues were fixed:

Don't abort loading users when an /etc/shadow entry is missing. (bsc#1090003)
When user session type is wayland, act_user_is_logged_in can return TRUE if the user is logged in. (bsc#1095918)

Record: SUSE-SU-2018:3625-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2778-1 No score

Security update for accountsservice

This update for accountsservice fixes the following issues:

Security issue fixed:

CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in user_change_icon_file_authorized_cb() (bsc#1099699).

Non-security issue fixed:

Improved wtmp io performance (bsc#1139487).

Record: SUSE-SU-2019:2778-1
Updated: 2026-11-02

OSVUSN-4616-1 No score

accountsservice vulnerabilities

Kevin Backhouse discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or hang, resulting in a denial of service. (CVE-2020-16126)

Kevin Backhouse discovered that AccountsService incorrectly handled reading .pam_environment files. A local user could possibly use this issue to cause AccountsService to crash or hang, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2020-16127)

Matthias Gerstner discovered that AccountsService incorrectly handled certain path checks. A local attacker could possibly use this issue to read arbitrary files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-14036)

Record: USN-4616-1
Updated: 2026-11-02

OSVUSN-4616-2 No score

accountsservice vulnerabilities

USN-4616-1 fixed several vulnerabilities in AccountsService. This update provides the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Matthias Gerstner discovered that AccountsService incorrectly handled certain path checks. A local attacker could possibly use this issue to read arbitrary files. (CVE-2018-14036)

Record: USN-4616-2
Updated: 2026-11-02

Affected products

freedesktop accountsservice

Affected packages

Affected packages
Package	Affected	Fixed
`accountsservice` Debian:12	before 0.6.45-2	0.6.45-2
`accountsservice` Debian:13	before 0.6.45-2	0.6.45-2
`accountsservice` Debian:14	before 0.6.45-2	0.6.45-2
`PackageKit` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-command-not-found` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-glib` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-gstreamer-plugin` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-gtk3-module` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-yum` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`accountsservice` Red Hat:enterprise_linux:7::client	before 0:0.6.50-2.el7	0:0.6.50-2.el7
`accountsservice-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.6.50-2.el7	0:0.6.50-2.el7
`accountsservice-libs` Red Hat:enterprise_linux:7::client	before 0:0.6.50-2.el7	0:0.6.50-2.el7
`adwaita-cursor-theme` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`adwaita-gtk2-theme` Red Hat:enterprise_linux:7::client	before 0:3.28-2.el7	0:3.28-2.el7
`adwaita-icon-theme` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`appstream-data` Red Hat:enterprise_linux:7::client	before 0:7-20180614.el7	0:7-20180614.el7
`at-spi2-atk` Red Hat:enterprise_linux:7::client	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-atk-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-core` Red Hat:enterprise_linux:7::client	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`at-spi2-core-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`atk` Red Hat:enterprise_linux:7::client	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`atk-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`baobab` Red Hat:enterprise_linux:7::client	before 0:3.28.0-2.el7	0:3.28.0-2.el7
`baobab-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-2.el7	0:3.28.0-2.el7
`bolt` Red Hat:enterprise_linux:7::client	before 0:0.4-3.el7	0:0.4-3.el7
`bolt-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.4-3.el7	0:0.4-3.el7
`brasero` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`brasero-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`brasero-libs` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`brasero-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`cairo` Red Hat:enterprise_linux:7::client	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-gobject` Red Hat:enterprise_linux:7::client	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cheese` Red Hat:enterprise_linux:7::client	before 2:3.28.0-1.el7	2:3.28.0-1.el7
`cheese-debuginfo` Red Hat:enterprise_linux:7::client	before 2:3.28.0-1.el7	2:3.28.0-1.el7
`cheese-libs` Red Hat:enterprise_linux:7::client	before 2:3.28.0-1.el7	2:3.28.0-1.el7
`clutter-gst3` Red Hat:enterprise_linux:7::client	before 0:3.0.26-1.el7	0:3.0.26-1.el7
`clutter-gst3-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.0.26-1.el7	0:3.0.26-1.el7
`compat-exiv2-023` Red Hat:enterprise_linux:7::client	before 0:0.23-2.el7	0:0.23-2.el7
`compat-exiv2-023-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.23-2.el7	0:0.23-2.el7
`compat-libical1` Red Hat:enterprise_linux:7::client	before 0:1.0.1-2.el7	0:1.0.1-2.el7
`control-center` Red Hat:enterprise_linux:7::client	before 1:3.28.1-4.el7	1:3.28.1-4.el7
`control-center-debuginfo` Red Hat:enterprise_linux:7::client	before 1:3.28.1-4.el7	1:3.28.1-4.el7
`control-center-filesystem` Red Hat:enterprise_linux:7::client	before 1:3.28.1-4.el7	1:3.28.1-4.el7
`dconf` Red Hat:enterprise_linux:7::client	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`dconf-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`dconf-editor` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`dconf-editor-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`ekiga` Red Hat:enterprise_linux:7::client	before 0:4.0.1-8.el7	0:4.0.1-8.el7
`ekiga-debuginfo` Red Hat:enterprise_linux:7::client	before 0:4.0.1-8.el7	0:4.0.1-8.el7
`empathy` Red Hat:enterprise_linux:7::client	before 0:3.12.13-1.el7	0:3.12.13-1.el7
`empathy-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.12.13-1.el7	0:3.12.13-1.el7
`eog` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`eog-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`evince` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-dvi` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-libs` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evolution` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-data-server` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-data-server-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-data-server-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-ews` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-ews-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-ews-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-help` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-mapi` Red Hat:enterprise_linux:7::client	before 0:3.28.3-2.el7	0:3.28.3-2.el7
`evolution-mapi-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-2.el7	0:3.28.3-2.el7
`evolution-mapi-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.3-2.el7	0:3.28.3-2.el7
`file-roller` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`file-roller-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`file-roller-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`flatpak` Red Hat:enterprise_linux:7::client	before 0:1.0.2-2.el7	0:1.0.2-2.el7
`flatpak-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.0.2-2.el7	0:1.0.2-2.el7
`flatpak-libs` Red Hat:enterprise_linux:7::client	before 0:1.0.2-2.el7	0:1.0.2-2.el7
`folks` Red Hat:enterprise_linux:7::client	before 1:0.11.4-1.el7	1:0.11.4-1.el7
`folks-debuginfo` Red Hat:enterprise_linux:7::client	before 1:0.11.4-1.el7	1:0.11.4-1.el7
`fontconfig` Red Hat:enterprise_linux:7::client	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`fontconfig-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`freetype` Red Hat:enterprise_linux:7::client	before 0:2.8-12.el7	0:2.8-12.el7
`freetype-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.8-12.el7	0:2.8-12.el7
`fribidi` Red Hat:enterprise_linux:7::client	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fribidi-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fwupd` Red Hat:enterprise_linux:7::client	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupd-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupdate` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`fwupdate-debuginfo` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`fwupdate-efi` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`fwupdate-libs` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`gcr` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gcr-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gdk-pixbuf2` Red Hat:enterprise_linux:7::client	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`gdk-pixbuf2-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`gdm` Red Hat:enterprise_linux:7::client	before 1:3.28.2-9.el7	1:3.28.2-9.el7
`gdm-debuginfo` Red Hat:enterprise_linux:7::client	before 1:3.28.2-9.el7	1:3.28.2-9.el7
`gedit` Red Hat:enterprise_linux:7::client	before 2:3.28.1-1.el7	2:3.28.1-1.el7
`gedit-debuginfo` Red Hat:enterprise_linux:7::client	before 2:3.28.1-1.el7	2:3.28.1-1.el7
`gedit-plugin-bookmarks` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-bracketcompletion` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-charmap` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-codecomment` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-colorpicker` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-colorschemer` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-commander` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-drawspaces` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-joinlines` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-multiedit` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-smartspaces` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-synctex` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-terminal` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-textsize` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-wordcompletion` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugins` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugins-data` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugins-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`geoclue2` Red Hat:enterprise_linux:7::client	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geoclue2-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geoclue2-libs` Red Hat:enterprise_linux:7::client	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geocode-glib` Red Hat:enterprise_linux:7::client	before 0:3.26.0-2.el7	0:3.26.0-2.el7
`geocode-glib-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.0-2.el7	0:3.26.0-2.el7
`gjs` Red Hat:enterprise_linux:7::client	before 0:1.52.3-1.el7	0:1.52.3-1.el7
`gjs-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.52.3-1.el7	0:1.52.3-1.el7
`glade` Red Hat:enterprise_linux:7::client	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-libs` Red Hat:enterprise_linux:7::client	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glib-networking` Red Hat:enterprise_linux:7::client	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib-networking-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib2` Red Hat:enterprise_linux:7::client	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glib2-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glibmm24` Red Hat:enterprise_linux:7::client	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`glibmm24-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`gnome-bluetooth` Red Hat:enterprise_linux:7::client	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-debuginfo` Red Hat:enterprise_linux:7::client	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-libs` Red Hat:enterprise_linux:7::client	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-boxes` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`gnome-boxes-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`gnome-calculator` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-calculator-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-classic-session` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-clocks` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-clocks-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-color-manager` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-color-manager-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-contacts` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-contacts-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-desktop3` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-desktop3-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-dictionary` Red Hat:enterprise_linux:7::client	before 0:3.26.1-2.el7	0:3.26.1-2.el7
`gnome-dictionary-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.1-2.el7	0:3.26.1-2.el7
`gnome-disk-utility` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`gnome-disk-utility-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`gnome-documents` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-documents-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-documents-libs` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-font-viewer` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-font-viewer-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-getting-started-docs` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-initial-setup` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-initial-setup-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-keyring` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-keyring-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-keyring-pam` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-online-accounts` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-online-accounts-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-online-miners` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-online-miners-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-packagekit` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-common` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-installer` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-updater` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-screenshot` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-screenshot-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-session` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-session-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-session-xsession` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-settings-daemon` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`gnome-settings-daemon-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`gnome-shell` Red Hat:enterprise_linux:7::client	before 0:3.28.3-6.el7	0:3.28.3-6.el7
`gnome-shell-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-6.el7	0:3.28.3-6.el7
`gnome-shell-extension-alternate-tab` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-apps-menu` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-common` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-launch-new-instance` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-places-menu` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-top-icons` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-user-theme` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-window-list` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extensions` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-software` Red Hat:enterprise_linux:7::client	before 0:3.28.2-3.el7	0:3.28.2-3.el7
`gnome-software-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-3.el7	0:3.28.2-3.el7
`gnome-system-monitor` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-system-monitor-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-terminal` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-terminal-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-terminal-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-themes-standard` Red Hat:enterprise_linux:7::client	before 0:3.28-2.el7	0:3.28-2.el7
`gnome-themes-standard-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28-2.el7	0:3.28-2.el7
`gnome-tweak-tool` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`PackageKit` Red Hat:enterprise_linux:7::computenode	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-glib` Red Hat:enterprise_linux:7::computenode	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`adwaita-cursor-theme` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`adwaita-icon-theme` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`at-spi2-atk` Red Hat:enterprise_linux:7::computenode	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-atk-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-core` Red Hat:enterprise_linux:7::computenode	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`at-spi2-core-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`atk` Red Hat:enterprise_linux:7::computenode	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`atk-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`cairo` Red Hat:enterprise_linux:7::computenode	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-gobject` Red Hat:enterprise_linux:7::computenode	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`compat-exiv2-023` Red Hat:enterprise_linux:7::computenode	before 0:0.23-2.el7	0:0.23-2.el7
`compat-exiv2-023-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.23-2.el7	0:0.23-2.el7
`compat-libical1` Red Hat:enterprise_linux:7::computenode	before 0:1.0.1-2.el7	0:1.0.1-2.el7
`dconf` Red Hat:enterprise_linux:7::computenode	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`dconf-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`fontconfig` Red Hat:enterprise_linux:7::computenode	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`fontconfig-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`freetype` Red Hat:enterprise_linux:7::computenode	before 0:2.8-12.el7	0:2.8-12.el7
`freetype-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.8-12.el7	0:2.8-12.el7
`fribidi` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fribidi-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fwupd` Red Hat:enterprise_linux:7::computenode	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupd-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupdate` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`fwupdate-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`fwupdate-efi` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`fwupdate-libs` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`gcr` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gcr-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gdk-pixbuf2` Red Hat:enterprise_linux:7::computenode	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`gdk-pixbuf2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`geoclue2` Red Hat:enterprise_linux:7::computenode	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geoclue2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`glade` Red Hat:enterprise_linux:7::computenode	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-libs` Red Hat:enterprise_linux:7::computenode	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glib-networking` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib-networking-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib2` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glib2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glibmm24` Red Hat:enterprise_linux:7::computenode	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`glibmm24-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`gnome-bluetooth` Red Hat:enterprise_linux:7::computenode	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-debuginfo` Red Hat:enterprise_linux:7::computenode	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-libs` Red Hat:enterprise_linux:7::computenode	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-user-docs` Red Hat:enterprise_linux:7::computenode	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gobject-introspection` Red Hat:enterprise_linux:7::computenode	before 0:1.56.1-1.el7	0:1.56.1-1.el7
`gobject-introspection-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.56.1-1.el7	0:1.56.1-1.el7
`google-noto-emoji-fonts` Red Hat:enterprise_linux:7::computenode	before 0:20180508-4.el7	0:20180508-4.el7
`gsettings-desktop-schemas` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-2.el7	0:3.28.0-2.el7
`gssdp` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`gssdp-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`gstreamer1-plugins-base` Red Hat:enterprise_linux:7::computenode	before 0:1.10.4-2.el7	0:1.10.4-2.el7
`gstreamer1-plugins-base-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.10.4-2.el7	0:1.10.4-2.el7
`gtk-update-icon-cache` Red Hat:enterprise_linux:7::computenode	before 0:3.22.30-3.el7	0:3.22.30-3.el7
`gtk3` Red Hat:enterprise_linux:7::computenode	before 0:3.22.30-3.el7	0:3.22.30-3.el7
`gtk3-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.22.30-3.el7	0:3.22.30-3.el7
`gupnp` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-5.el7	0:1.0.2-5.el7
`gupnp-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-5.el7	0:1.0.2-5.el7
`gupnp-igd` Red Hat:enterprise_linux:7::computenode	before 0:0.2.5-2.el7	0:0.2.5-2.el7
`gupnp-igd-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.2.5-2.el7	0:0.2.5-2.el7
`harfbuzz` Red Hat:enterprise_linux:7::computenode	before 0:1.7.5-2.el7	0:1.7.5-2.el7
`harfbuzz-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.7.5-2.el7	0:1.7.5-2.el7
`harfbuzz-icu` Red Hat:enterprise_linux:7::computenode	before 0:1.7.5-2.el7	0:1.7.5-2.el7
`json-glib` Red Hat:enterprise_linux:7::computenode	before 0:1.4.2-2.el7	0:1.4.2-2.el7
`json-glib-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.4.2-2.el7	0:1.4.2-2.el7
`libappstream-glib` Red Hat:enterprise_linux:7::computenode	before 0:0.7.8-2.el7	0:0.7.8-2.el7
`libappstream-glib-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.7.8-2.el7	0:0.7.8-2.el7
`libcroco` Red Hat:enterprise_linux:7::computenode	before 0:0.6.12-4.el7	0:0.6.12-4.el7
`libcroco-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.6.12-4.el7	0:0.6.12-4.el7
`libgnomekbd` Red Hat:enterprise_linux:7::computenode	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`libgnomekbd-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`libical` Red Hat:enterprise_linux:7::computenode	before 0:3.0.3-2.el7	0:3.0.3-2.el7
`libical-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.0.3-2.el7	0:3.0.3-2.el7
`libjpeg-turbo` Red Hat:enterprise_linux:7::computenode	before 0:1.2.90-6.el7	0:1.2.90-6.el7
`libjpeg-turbo-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.2.90-6.el7	0:1.2.90-6.el7
`librsvg2` Red Hat:enterprise_linux:7::computenode	before 0:2.40.20-1.el7	0:2.40.20-1.el7
`librsvg2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.40.20-1.el7	0:2.40.20-1.el7
`librsvg2-tools` Red Hat:enterprise_linux:7::computenode	before 0:2.40.20-1.el7	0:2.40.20-1.el7
`libsecret` Red Hat:enterprise_linux:7::computenode	before 0:0.18.6-1.el7	0:0.18.6-1.el7
`accountsservice` SUSE:Linux Enterprise Module for Desktop Applications 15	before 0.6.45-6.7.6	0.6.45-6.7.6
`accountsservice` SUSE:Linux Enterprise Desktop 12 SP4	before 0.6.42-16.8.3	0.6.42-16.8.3
`accountsservice` SUSE:Linux Enterprise Software Development Kit 12 SP4	before 0.6.42-16.8.3	0.6.42-16.8.3
`accountsservice` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 0.6.42-16.8.3	0.6.42-16.8.3
`accountsservice` SUSE:Linux Enterprise Server 12 SP4	before 0.6.42-16.8.3	0.6.42-16.8.3
`accountsservice` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	before 0.6.42-16.8.3	0.6.42-16.8.3
`accountsservice` SUSE:Linux Enterprise Server 12 SP5	before 0.6.42-16.8.3	0.6.42-16.8.3
`accountsservice` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 0.6.42-16.8.3	0.6.42-16.8.3
`accountsservice` Ubuntu:Pro:14.04:LTS	before 0.6.35-0ubuntu7.3+esm2, plus listed versions 0.6.34-0ubuntu60.6.34-0ubuntu70.6.35-0ubuntu10.6.35-0ubuntu20.6.35-0ubuntu3 Show 7 moreShow less 0.6.35-0ubuntu40.6.35-0ubuntu50.6.35-0ubuntu60.6.35-0ubuntu70.6.35-0ubuntu7.10.6.35-0ubuntu7.20.6.35-0ubuntu7.3	0.6.35-0ubuntu7.3+esm2
`accountsservice` Ubuntu:16.04:LTS	before 0.6.40-2ubuntu11.6, plus listed versions 0.6.40-2ubuntu50.6.40-2ubuntu60.6.40-2ubuntu70.6.40-2ubuntu80.6.40-2ubuntu9 Show 5 moreShow less 0.6.40-2ubuntu100.6.40-2ubuntu110.6.40-2ubuntu11.10.6.40-2ubuntu11.20.6.40-2ubuntu11.3	0.6.40-2ubuntu11.6
`accountsservice` Ubuntu:18.04:LTS	before 0.6.45-1ubuntu1.3, plus listed versions 0.6.42-0ubuntu30.6.42-0ubuntu40.6.45-1ubuntu1	0.6.45-1ubuntu1.3
`accountsservice` Ubuntu:20.04:LTS	before 0.6.55-0ubuntu12~20.04.4, plus listed versions 0.6.55-0ubuntu100.6.55-0ubuntu110.6.55-0ubuntu12~20.04.10.6.55-0ubuntu12~20.04.2	0.6.55-0ubuntu12~20.04.4
`accountservice` openSUSE:Tumbleweed	before 0.6.55-8.2	0.6.55-8.2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-14036 is a medium vulnerability (CVSS 6.5) in Freedesktop Accountsservice, published July 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.05%, the 87th percentile. Fixed in accountsservice 0.6.45-2.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 516 package rows and 84 references. The JSON record has them. Also not on the record: 1,210 package claims. ID and package lookups still check them.