# ELSA-2020-1577: Security update for 8 packages ELSA-2020-1577, released May 5, 2020, fixes 29 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2020-1577 - Platform: Linux - Released: May 5, 2020 - Priority: High (Closes CVE-2019-20421, high severity) - CVEs: 29, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2020-1577.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [exiv2](https://patchblox.com/security/data/product/linux/exiv2.md) | ol 8 | 0:0.27.2-5.el8 | | [exiv2-devel](https://patchblox.com/security/data/product/linux/exiv2-devel.md) | ol 8 | 0:0.27.2-5.el8 | | [exiv2-doc](https://patchblox.com/security/data/product/linux/exiv2-doc.md) | ol 8 | 0:0.27.2-5.el8 | | [exiv2-libs](https://patchblox.com/security/data/product/linux/exiv2-libs.md) | ol 8 | 0:0.27.2-5.el8 | | [gegl](https://patchblox.com/security/data/product/linux/gegl.md) | ol 8 | 0:0.2.0-39.el8 | | [gnome-color-manager](https://patchblox.com/security/data/product/linux/gnome-color-manager.md) | ol 8 | 0:3.28.0-3.el8 | | [libgexiv2](https://patchblox.com/security/data/product/linux/libgexiv2.md) | ol 8 | 0:0.10.8-4.el8 | | [libgexiv2-devel](https://patchblox.com/security/data/product/linux/libgexiv2-devel.md) | ol 8 | 0:0.10.8-4.el8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-20421](https://patchblox.com/security/data/cve/CVE-2019-20421.md) | High | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 7.5 | 0.0430 | | | [CVE-2019-9143](https://patchblox.com/security/data/cve/CVE-2019-9143.md) | High | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 8.8 | 0.0277 | | | [CVE-2018-9305](https://patchblox.com/security/data/cve/CVE-2018-9305.md) | High | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 8.1 | 0.0192 | | | [CVE-2018-14338](https://patchblox.com/security/data/cve/CVE-2018-14338.md) | High | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 8.1 | 0.0143 | | | [CVE-2018-20096](https://patchblox.com/security/data/cve/CVE-2018-20096.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0276 | | | [CVE-2018-20098](https://patchblox.com/security/data/cve/CVE-2018-20098.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0257 | | | [CVE-2018-19607](https://patchblox.com/security/data/cve/CVE-2018-19607.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0252 | | | [CVE-2018-17581](https://patchblox.com/security/data/cve/CVE-2018-17581.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0235 | | | [CVE-2018-11037](https://patchblox.com/security/data/cve/CVE-2018-11037.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0230 | | | [CVE-2018-20099](https://patchblox.com/security/data/cve/CVE-2018-20099.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0229 | | | [CVE-2018-20097](https://patchblox.com/security/data/cve/CVE-2018-20097.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0229 | | | [CVE-2018-17229](https://patchblox.com/security/data/cve/CVE-2018-17229.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0221 | | | [CVE-2018-17230](https://patchblox.com/security/data/cve/CVE-2018-17230.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0221 | | | [CVE-2018-17282](https://patchblox.com/security/data/cve/CVE-2018-17282.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0215 | | | [CVE-2019-13113](https://patchblox.com/security/data/cve/CVE-2019-13113.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0213 | | | [CVE-2019-13114](https://patchblox.com/security/data/cve/CVE-2019-13114.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0212 | | | [CVE-2018-19535](https://patchblox.com/security/data/cve/CVE-2018-19535.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0209 | | | [CVE-2018-18915](https://patchblox.com/security/data/cve/CVE-2018-18915.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0199 | | | [CVE-2019-13112](https://patchblox.com/security/data/cve/CVE-2019-13112.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0198 | | | [CVE-2018-19108](https://patchblox.com/security/data/cve/CVE-2018-19108.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0194 | | | [CVE-2018-19107](https://patchblox.com/security/data/cve/CVE-2018-19107.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0182 | | | [CVE-2018-9304](https://patchblox.com/security/data/cve/CVE-2018-9304.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0168 | | | [CVE-2018-4868](https://patchblox.com/security/data/cve/CVE-2018-4868.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 5.5 | 0.0160 | | | [CVE-2019-13109](https://patchblox.com/security/data/cve/CVE-2019-13109.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0158 | | | [CVE-2018-10772](https://patchblox.com/security/data/cve/CVE-2018-10772.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0155 | | | [CVE-2018-9303](https://patchblox.com/security/data/cve/CVE-2018-9303.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0137 | | | [CVE-2019-13111](https://patchblox.com/security/data/cve/CVE-2019-13111.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 5.5 | 0.0080 | | | [CVE-2017-18005](https://patchblox.com/security/data/cve/CVE-2017-18005.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 5.5 | 0.0080 | | | [CVE-2018-9306](https://patchblox.com/security/data/cve/CVE-2018-9306.md) | Routine | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 4.4 | n/a | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo