# ELSA-2020-1766: Security update for 56 packages ELSA-2020-1766, released May 5, 2020, fixes 5 CVEs across 56 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2020-1766 - Platform: Linux - Released: May 5, 2020 - Priority: High (Closes CVE-2018-20337, high severity) - CVEs: 5, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2020-1766.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [LibRaw](https://patchblox.com/security/data/product/linux/libraw-libraw.md) | ol 8 | 0:0.19.5-1.el8 | | [LibRaw-devel](https://patchblox.com/security/data/product/linux/libraw-devel.md) | ol 8 | 0:0.19.5-1.el8 | | [accountsservice](https://patchblox.com/security/data/product/linux/accountsservice.md) | ol 8 | 0:0.6.50-8.el8 | | [accountsservice-devel](https://patchblox.com/security/data/product/linux/accountsservice-devel.md) | ol 8 | 0:0.6.50-8.el8 | | [accountsservice-libs](https://patchblox.com/security/data/product/linux/accountsservice-libs.md) | ol 8 | 0:0.6.50-8.el8 | | [appstream-data](https://patchblox.com/security/data/product/linux/appstream-data.md) | ol 8 | 0:8-20191129.el8 | | [clutter](https://patchblox.com/security/data/product/linux/clutter.md) | ol 8 | 0:1.26.2-8.el8 | | [clutter-devel](https://patchblox.com/security/data/product/linux/clutter-devel.md) | ol 8 | 0:1.26.2-8.el8 | | [clutter-doc](https://patchblox.com/security/data/product/linux/clutter-doc.md) | ol 8 | 0:1.26.2-8.el8 | | [evince](https://patchblox.com/security/data/product/linux/evince.md) | ol 8 | 0:3.28.4-4.el8 | | [evince-browser-plugin](https://patchblox.com/security/data/product/linux/evince-browser-plugin.md) | ol 8 | 0:3.28.4-4.el8 | | [evince-libs](https://patchblox.com/security/data/product/linux/evince-libs.md) | ol 8 | 0:3.28.4-4.el8 | | [evince-nautilus](https://patchblox.com/security/data/product/linux/evince-nautilus.md) | ol 8 | 0:3.28.4-4.el8 | | [gdm](https://patchblox.com/security/data/product/linux/gdm.md) | ol 8 | 1:3.28.3-29.el8 | | [gjs](https://patchblox.com/security/data/product/linux/gjs.md) | ol 8 | 0:1.56.2-4.el8 | | [gjs-devel](https://patchblox.com/security/data/product/linux/gjs-devel.md) | ol 8 | 0:1.56.2-4.el8 | | [gnome-boxes](https://patchblox.com/security/data/product/linux/gnome-boxes.md) | ol 8 | 0:3.28.5-8.el8 | | [gnome-control-center](https://patchblox.com/security/data/product/linux/gnome-control-center.md) | ol 8 | 0:3.28.2-19.el8 | | [gnome-control-center-filesystem](https://patchblox.com/security/data/product/linux/gnome-control-center-filesystem.md) | ol 8 | 0:3.28.2-19.el8 | | [gnome-menus](https://patchblox.com/security/data/product/linux/gnome-menus.md) | ol 8 | 0:3.13.3-11.el8 | | [gnome-menus-devel](https://patchblox.com/security/data/product/linux/gnome-menus-devel.md) | ol 8 | 0:3.13.3-11.el8 | | [gnome-online-accounts](https://patchblox.com/security/data/product/linux/gnome-online-accounts.md) | ol 8 | 0:3.28.2-1.el8 | | [gnome-online-accounts-devel](https://patchblox.com/security/data/product/linux/gnome-online-accounts-devel.md) | ol 8 | 0:3.28.2-1.el8 | | [gnome-remote-desktop](https://patchblox.com/security/data/product/linux/gnome-remote-desktop.md) | ol 8 | 0:0.1.6-8.el8 | | [gnome-session](https://patchblox.com/security/data/product/linux/gnome-session.md) | ol 8 | 0:3.28.1-8.el8 | | [gnome-session-wayland-session](https://patchblox.com/security/data/product/linux/gnome-session-wayland-session.md) | ol 8 | 0:3.28.1-8.el8 | | [gnome-session-xsession](https://patchblox.com/security/data/product/linux/gnome-session-xsession.md) | ol 8 | 0:3.28.1-8.el8 | | [gnome-settings-daemon](https://patchblox.com/security/data/product/linux/gnome-settings-daemon.md) | ol 8 | 0:3.32.0-9.el8 | | [gnome-shell](https://patchblox.com/security/data/product/linux/gnome-shell.md) | ol 8 | 0:3.32.2-14.el8 | | [gnome-software](https://patchblox.com/security/data/product/linux/gnome-software.md) | ol 8 | 0:3.30.6-3.el8 | | [gnome-software-editor](https://patchblox.com/security/data/product/linux/gnome-software-editor.md) | ol 8 | 0:3.30.6-3.el8 | | [gnome-terminal](https://patchblox.com/security/data/product/linux/gnome-terminal.md) | ol 8 | 0:3.28.3-1.el8 | | [gnome-terminal-nautilus](https://patchblox.com/security/data/product/linux/gnome-terminal-nautilus.md) | ol 8 | 0:3.28.3-1.el8 | | [gnome-tweaks](https://patchblox.com/security/data/product/linux/gnome-tweaks.md) | ol 8 | 0:3.28.1-7.el8 | | [gsettings-desktop-schemas](https://patchblox.com/security/data/product/linux/gsettings-desktop-schemas.md) | ol 8 | 0:3.32.0-4.el8 | | [gsettings-desktop-schemas-devel](https://patchblox.com/security/data/product/linux/gsettings-desktop-schemas-devel.md) | ol 8 | 0:3.32.0-4.el8 | | [gtk-update-icon-cache](https://patchblox.com/security/data/product/linux/gtk-update-icon-cache.md) | ol 8 | 0:3.22.30-5.el8 | | [gtk3](https://patchblox.com/security/data/product/linux/gtk3.md) | ol 8 | 0:3.22.30-5.el8 | | [gtk3-devel](https://patchblox.com/security/data/product/linux/gtk3-devel.md) | ol 8 | 0:3.22.30-5.el8 | | [gtk3-immodule-xim](https://patchblox.com/security/data/product/linux/gtk3-immodule-xim.md) | ol 8 | 0:3.22.30-5.el8 | | [libvncserver](https://patchblox.com/security/data/product/linux/libvncserver.md) | ol 8 | 0:0.9.11-14.el8 | | [libvncserver-devel](https://patchblox.com/security/data/product/linux/libvncserver-devel.md) | ol 8 | 0:0.9.11-14.el8 | | [libxslt](https://patchblox.com/security/data/product/linux/libxslt.md) | ol 8 | 0:1.1.32-4.0.1.el8 | | [libxslt-devel](https://patchblox.com/security/data/product/linux/libxslt-devel.md) | ol 8 | 0:1.1.32-4.0.1.el8 | | [mozjs52](https://patchblox.com/security/data/product/linux/mozjs52.md) | ol 8 | 0:52.9.0-2.0.1.el8 | | [mozjs52-devel](https://patchblox.com/security/data/product/linux/mozjs52-devel.md) | ol 8 | 0:52.9.0-2.0.1.el8 | | [mozjs60](https://patchblox.com/security/data/product/linux/mozjs60.md) | ol 8 | 0:60.9.0-4.0.1.el8 | | [mozjs60-devel](https://patchblox.com/security/data/product/linux/mozjs60-devel.md) | ol 8 | 0:60.9.0-4.0.1.el8 | | [mutter](https://patchblox.com/security/data/product/linux/mutter.md) | ol 8 | 0:3.32.2-34.el8 | | [mutter-devel](https://patchblox.com/security/data/product/linux/mutter-devel.md) | ol 8 | 0:3.32.2-34.el8 | | [nautilus](https://patchblox.com/security/data/product/linux/nautilus.md) | ol 8 | 0:3.28.1-12.el8 | | [nautilus-devel](https://patchblox.com/security/data/product/linux/nautilus-devel.md) | ol 8 | 0:3.28.1-12.el8 | | [nautilus-extensions](https://patchblox.com/security/data/product/linux/nautilus-extensions.md) | ol 8 | 0:3.28.1-12.el8 | | [vala](https://patchblox.com/security/data/product/linux/vala.md) | ol 8 | 0:0.40.19-1.el8 | | [vala-devel](https://patchblox.com/security/data/product/linux/vala-devel.md) | ol 8 | 0:0.40.19-1.el8 | | [vinagre](https://patchblox.com/security/data/product/linux/vinagre.md) | ol 8 | 0:3.22.0-21.el8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2018-20337](https://patchblox.com/security/data/cve/CVE-2018-20337.md) | High | gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 8.8 | 0.0215 | | | [CVE-2019-12447](https://patchblox.com/security/data/cve/CVE-2019-12447.md) | High | clutter-devel: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 7.3 | 0.0181 | | | [CVE-2019-12448](https://patchblox.com/security/data/cve/CVE-2019-12448.md) | High | accountsservice: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 8.1 | 0.0176 | | | [CVE-2019-12449](https://patchblox.com/security/data/cve/CVE-2019-12449.md) | Routine | accountsservice: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 5.7 | 0.0182 | | | [CVE-2019-3825](https://patchblox.com/security/data/cve/CVE-2019-3825.md) | Routine | gdm3: A vulnerability was discovered in gdm before 3.31.4 | 6.4 | 0.0051 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo