# ELSA-2020-4451: Security update for 97 packages ELSA-2020-4451, released November 10, 2020, fixes 53 CVEs across 97 products. One of them is being exploited (CVE-2019-8720); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/elsa-2020-4451 - Platform: Linux - Released: Nov 10, 2020 - Priority: Patch now (Closes CVE-2019-8720, exploited (CISA KEV)) - CVEs: 53, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2020-4451.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [LibRaw](https://patchblox.com/security/data/product/linux/libraw-libraw.md) | ol 8 | 0:0.19.5-2.el8 | | [LibRaw-devel](https://patchblox.com/security/data/product/linux/libraw-devel.md) | ol 8 | 0:0.19.5-2.el8 | | [PackageKit](https://patchblox.com/security/data/product/linux/packagekit-packagekit.md) | ol 8 | 0:1.1.12-6.0.1.el8 | | [PackageKit-command-not-found](https://patchblox.com/security/data/product/linux/packagekit-command-not-found.md) | ol 8 | 0:1.1.12-6.0.1.el8 | | [PackageKit-cron](https://patchblox.com/security/data/product/linux/packagekit-cron.md) | ol 8 | 0:1.1.12-6.0.1.el8 | | [PackageKit-glib](https://patchblox.com/security/data/product/linux/packagekit-glib.md) | ol 8 | 0:1.1.12-6.0.1.el8 | | [PackageKit-glib-devel](https://patchblox.com/security/data/product/linux/packagekit-glib-devel.md) | ol 8 | 0:1.1.12-6.0.1.el8 | | [PackageKit-gstreamer-plugin](https://patchblox.com/security/data/product/linux/packagekit-gstreamer-plugin.md) | ol 8 | 0:1.1.12-6.0.1.el8 | | [PackageKit-gtk3-module](https://patchblox.com/security/data/product/linux/packagekit-gtk3-module.md) | ol 8 | 0:1.1.12-6.0.1.el8 | | [dleyna-renderer](https://patchblox.com/security/data/product/linux/dleyna-renderer.md) | ol 8 | 0:0.6.0-3.el8 | | [frei0r-devel](https://patchblox.com/security/data/product/linux/frei0r-devel.md) | ol 8 | 0:1.6.1-7.el8 | | [frei0r-plugins](https://patchblox.com/security/data/product/linux/frei0r-plugins.md) | ol 8 | 0:1.6.1-7.el8 | | [frei0r-plugins-opencv](https://patchblox.com/security/data/product/linux/frei0r-plugins-opencv.md) | ol 8 | 0:1.6.1-7.el8 | | [gdm](https://patchblox.com/security/data/product/linux/gdm.md) | ol 8 | 1:3.28.3-34.el8 | | [gnome-classic-session](https://patchblox.com/security/data/product/linux/gnome-classic-session.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-control-center](https://patchblox.com/security/data/product/linux/gnome-control-center.md) | ol 8 | 0:3.28.2-22.el8 | | [gnome-control-center-filesystem](https://patchblox.com/security/data/product/linux/gnome-control-center-filesystem.md) | ol 8 | 0:3.28.2-22.el8 | | [gnome-photos](https://patchblox.com/security/data/product/linux/gnome-photos.md) | ol 8 | 0:3.28.1-3.el8 | | [gnome-photos-tests](https://patchblox.com/security/data/product/linux/gnome-photos-tests.md) | ol 8 | 0:3.28.1-3.el8 | | [gnome-remote-desktop](https://patchblox.com/security/data/product/linux/gnome-remote-desktop.md) | ol 8 | 0:0.1.8-3.el8 | | [gnome-session](https://patchblox.com/security/data/product/linux/gnome-session.md) | ol 8 | 0:3.28.1-10.0.1.el8 | | [gnome-session-wayland-session](https://patchblox.com/security/data/product/linux/gnome-session-wayland-session.md) | ol 8 | 0:3.28.1-10.0.1.el8 | | [gnome-session-xsession](https://patchblox.com/security/data/product/linux/gnome-session-xsession.md) | ol 8 | 0:3.28.1-10.0.1.el8 | | [gnome-settings-daemon](https://patchblox.com/security/data/product/linux/gnome-settings-daemon.md) | ol 8 | 0:3.32.0-11.el8 | | [gnome-shell](https://patchblox.com/security/data/product/linux/gnome-shell.md) | ol 8 | 0:3.32.2-20.el8 | | [gnome-shell-extension-apps-menu](https://patchblox.com/security/data/product/linux/gnome-shell-extension-apps-menu.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-auto-move-windows](https://patchblox.com/security/data/product/linux/gnome-shell-extension-auto-move-windows.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-common](https://patchblox.com/security/data/product/linux/gnome-shell-extension-common.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-dash-to-dock](https://patchblox.com/security/data/product/linux/gnome-shell-extension-dash-to-dock.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-desktop-icons](https://patchblox.com/security/data/product/linux/gnome-shell-extension-desktop-icons.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-disable-screenshield](https://patchblox.com/security/data/product/linux/gnome-shell-extension-disable-screenshield.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-drive-menu](https://patchblox.com/security/data/product/linux/gnome-shell-extension-drive-menu.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-horizontal-workspaces](https://patchblox.com/security/data/product/linux/gnome-shell-extension-horizontal-workspaces.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-launch-new-instance](https://patchblox.com/security/data/product/linux/gnome-shell-extension-launch-new-instance.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-native-window-placement](https://patchblox.com/security/data/product/linux/gnome-shell-extension-native-window-placement.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-no-hot-corner](https://patchblox.com/security/data/product/linux/gnome-shell-extension-no-hot-corner.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-panel-favorites](https://patchblox.com/security/data/product/linux/gnome-shell-extension-panel-favorites.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-places-menu](https://patchblox.com/security/data/product/linux/gnome-shell-extension-places-menu.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-screenshot-window-sizer](https://patchblox.com/security/data/product/linux/gnome-shell-extension-screenshot-window-sizer.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-systemMonitor](https://patchblox.com/security/data/product/linux/gnome-shell-extension-systemmonitor.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-top-icons](https://patchblox.com/security/data/product/linux/gnome-shell-extension-top-icons.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-updates-dialog](https://patchblox.com/security/data/product/linux/gnome-shell-extension-updates-dialog.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-user-theme](https://patchblox.com/security/data/product/linux/gnome-shell-extension-user-theme.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-window-grouper](https://patchblox.com/security/data/product/linux/gnome-shell-extension-window-grouper.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-window-list](https://patchblox.com/security/data/product/linux/gnome-shell-extension-window-list.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-windowsNavigator](https://patchblox.com/security/data/product/linux/gnome-shell-extension-windowsnavigator.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-shell-extension-workspace-indicator](https://patchblox.com/security/data/product/linux/gnome-shell-extension-workspace-indicator.md) | ol 8 | 0:3.32.1-11.el8 | | [gnome-terminal](https://patchblox.com/security/data/product/linux/gnome-terminal.md) | ol 8 | 0:3.28.3-2.el8 | | [gnome-terminal-nautilus](https://patchblox.com/security/data/product/linux/gnome-terminal-nautilus.md) | ol 8 | 0:3.28.3-2.el8 | | [gsettings-desktop-schemas](https://patchblox.com/security/data/product/linux/gsettings-desktop-schemas.md) | ol 8 | 0:3.32.0-5.el8 | | [gsettings-desktop-schemas-devel](https://patchblox.com/security/data/product/linux/gsettings-desktop-schemas-devel.md) | ol 8 | 0:3.32.0-5.el8 | | [gtk-doc](https://patchblox.com/security/data/product/linux/gtk-doc.md) | ol 8 | 0:1.28-2.el8 | | [gtk-update-icon-cache](https://patchblox.com/security/data/product/linux/gtk-update-icon-cache.md) | ol 8 | 0:3.22.30-6.el8 | | [gtk3](https://patchblox.com/security/data/product/linux/gtk3.md) | ol 8 | 0:3.22.30-6.el8 | | [gtk3-devel](https://patchblox.com/security/data/product/linux/gtk3-devel.md) | ol 8 | 0:3.22.30-6.el8 | | [gtk3-immodule-xim](https://patchblox.com/security/data/product/linux/gtk3-immodule-xim.md) | ol 8 | 0:3.22.30-6.el8 | | [gvfs](https://patchblox.com/security/data/product/linux/gvfs.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-afc](https://patchblox.com/security/data/product/linux/gvfs-afc.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-afp](https://patchblox.com/security/data/product/linux/gvfs-afp.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-archive](https://patchblox.com/security/data/product/linux/gvfs-archive.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-client](https://patchblox.com/security/data/product/linux/gvfs-client.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-devel](https://patchblox.com/security/data/product/linux/gvfs-devel.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-fuse](https://patchblox.com/security/data/product/linux/gvfs-fuse.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-goa](https://patchblox.com/security/data/product/linux/gvfs-goa.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-gphoto2](https://patchblox.com/security/data/product/linux/gvfs-gphoto2.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-mtp](https://patchblox.com/security/data/product/linux/gvfs-mtp.md) | ol 8 | 0:1.36.2-10.el8 | | [gvfs-smb](https://patchblox.com/security/data/product/linux/gvfs-smb.md) | ol 8 | 0:1.36.2-10.el8 | | [libsoup](https://patchblox.com/security/data/product/linux/libsoup.md) | ol 8 | 0:2.62.3-2.el8 | | [libsoup-devel](https://patchblox.com/security/data/product/linux/libsoup-devel.md) | ol 8 | 0:2.62.3-2.el8 | | [mutter](https://patchblox.com/security/data/product/linux/mutter.md) | ol 8 | 0:3.32.2-48.el8 | | [mutter-devel](https://patchblox.com/security/data/product/linux/mutter-devel.md) | ol 8 | 0:3.32.2-48.el8 | | [nautilus](https://patchblox.com/security/data/product/linux/nautilus.md) | ol 8 | 0:3.28.1-14.el8 | | [nautilus-devel](https://patchblox.com/security/data/product/linux/nautilus-devel.md) | ol 8 | 0:3.28.1-14.el8 | | [nautilus-extensions](https://patchblox.com/security/data/product/linux/nautilus-extensions.md) | ol 8 | 0:3.28.1-14.el8 | | [pipewire](https://patchblox.com/security/data/product/linux/pipewire.md) | ol 8 | 0:0.3.6-1.el8 | | [pipewire-devel](https://patchblox.com/security/data/product/linux/pipewire-devel.md) | ol 8 | 0:0.3.6-1.el8 | | [pipewire-doc](https://patchblox.com/security/data/product/linux/pipewire-doc.md) | ol 8 | 0:0.3.6-1.el8 | | [pipewire-libs](https://patchblox.com/security/data/product/linux/pipewire-libs.md) | ol 8 | 0:0.3.6-1.el8 | | [pipewire-utils](https://patchblox.com/security/data/product/linux/pipewire-utils.md) | ol 8 | 0:0.3.6-1.el8 | | [pipewire0.2-devel](https://patchblox.com/security/data/product/linux/pipewire0.2-devel.md) | ol 8 | 0:0.2.7-6.el8 | | [pipewire0.2-libs](https://patchblox.com/security/data/product/linux/pipewire0.2-libs.md) | ol 8 | 0:0.2.7-6.el8 | | [potrace](https://patchblox.com/security/data/product/linux/potrace.md) | ol 8 | 0:1.15-3.el8 | | [pygobject3-devel](https://patchblox.com/security/data/product/linux/pygobject3-devel.md) | ol 8 | 0:3.28.3-2.el8 | | [python3-gobject](https://patchblox.com/security/data/product/linux/python3-gobject.md) | ol 8 | 0:3.28.3-2.el8 | | [python3-gobject-base](https://patchblox.com/security/data/product/linux/python3-gobject-base.md) | ol 8 | 0:3.28.3-2.el8 | | [tracker](https://patchblox.com/security/data/product/linux/tracker.md) | ol 8 | 0:2.1.5-2.el8 | | [tracker-devel](https://patchblox.com/security/data/product/linux/tracker-devel.md) | ol 8 | 0:2.1.5-2.el8 | | [vte-profile](https://patchblox.com/security/data/product/linux/vte-profile.md) | ol 8 | 0:0.52.4-2.el8 | | [vte291](https://patchblox.com/security/data/product/linux/vte291.md) | ol 8 | 0:0.52.4-2.el8 | | [vte291-devel](https://patchblox.com/security/data/product/linux/vte291-devel.md) | ol 8 | 0:0.52.4-2.el8 | | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | ol 8 | 0:2.28.4-1.el8 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | ol 8 | 0:2.28.4-1.el8 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | ol 8 | 0:2.28.4-1.el8 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | ol 8 | 0:2.28.4-1.el8 | | [webrtc-audio-processing](https://patchblox.com/security/data/product/linux/webrtc-audio-processing.md) | ol 8 | 0:0.3-9.el8 | | [xdg-desktop-portal](https://patchblox.com/security/data/product/linux/xdg-desktop-portal.md) | ol 8 | 0:1.6.0-2.el8 | | [xdg-desktop-portal-gtk](https://patchblox.com/security/data/product/linux/xdg-desktop-portal-gtk.md) | ol 8 | 0:1.6.0-1.el8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-8720](https://patchblox.com/security/data/cve/CVE-2019-8720.md) | Patch now | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0156 | CISA KEV | | [CVE-2020-9850](https://patchblox.com/security/data/cve/CVE-2020-9850.md) | High | iTunes: A logic issue was addressed with improved restrictions. | 9.8 | 0.7740 | | | [CVE-2019-8820](https://patchblox.com/security/data/cve/CVE-2019-8820.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0962 | | | [CVE-2020-9802](https://patchblox.com/security/data/cve/CVE-2020-9802.md) | High | iTunes: A logic issue was addressed with improved restrictions. | 8.8 | 0.0827 | | | [CVE-2020-10018](https://patchblox.com/security/data/cve/CVE-2020-10018.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 7.5 | 0.0499 | | | [CVE-2020-3897](https://patchblox.com/security/data/cve/CVE-2020-3897.md) | High | iTunes: A type confusion issue was addressed with improved memory handling. | 8.8 | 0.0466 | | | [CVE-2020-9895](https://patchblox.com/security/data/cve/CVE-2020-9895.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 9.8 | 0.0449 | | | [CVE-2020-3899](https://patchblox.com/security/data/cve/CVE-2020-3899.md) | High | iTunes: A memory consumption issue was addressed with improved memory handling. | 8.8 | 0.0412 | | | [CVE-2020-15503](https://patchblox.com/security/data/cve/CVE-2020-15503.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 7.5 | 0.0367 | | | [CVE-2020-9893](https://patchblox.com/security/data/cve/CVE-2020-9893.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 8.8 | 0.0295 | | | [CVE-2020-11793](https://patchblox.com/security/data/cve/CVE-2020-11793.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0294 | | | [CVE-2020-9894](https://patchblox.com/security/data/cve/CVE-2020-9894.md) | High | iTunes: An out-of-bounds read was addressed with improved input validation. | 9.8 | 0.0284 | | | [CVE-2020-3868](https://patchblox.com/security/data/cve/CVE-2020-3868.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0270 | | | [CVE-2020-3895](https://patchblox.com/security/data/cve/CVE-2020-3895.md) | High | iTunes: A memory corruption issue was addressed with improved memory handling. | 8.8 | 0.0264 | | | [CVE-2019-8816](https://patchblox.com/security/data/cve/CVE-2019-8816.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0258 | | | [CVE-2019-8814](https://patchblox.com/security/data/cve/CVE-2019-8814.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0254 | | | [CVE-2019-8846](https://patchblox.com/security/data/cve/CVE-2019-8846.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 8.8 | 0.0234 | | | [CVE-2019-8815](https://patchblox.com/security/data/cve/CVE-2019-8815.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0229 | | | [CVE-2019-8844](https://patchblox.com/security/data/cve/CVE-2019-8844.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0227 | | | [CVE-2019-8835](https://patchblox.com/security/data/cve/CVE-2019-8835.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0211 | | | [CVE-2019-8811](https://patchblox.com/security/data/cve/CVE-2019-8811.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0200 | | | [CVE-2019-8783](https://patchblox.com/security/data/cve/CVE-2019-8783.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0195 | | | [CVE-2020-9862](https://patchblox.com/security/data/cve/CVE-2020-9862.md) | High | iTunes: A command injection issue existed in Web Inspector. | 7.8 | 0.0192 | | | [CVE-2019-8819](https://patchblox.com/security/data/cve/CVE-2019-8819.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0192 | | | [CVE-2019-8823](https://patchblox.com/security/data/cve/CVE-2019-8823.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0192 | | | [CVE-2020-3901](https://patchblox.com/security/data/cve/CVE-2020-3901.md) | High | iTunes: A type confusion issue was addressed with improved memory handling. | 8.8 | 0.0191 | | | [CVE-2020-3900](https://patchblox.com/security/data/cve/CVE-2020-3900.md) | High | iTunes: A memory corruption issue was addressed with improved memory handling. | 8.8 | 0.0190 | | | [CVE-2019-8812](https://patchblox.com/security/data/cve/CVE-2019-8812.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0189 | | | [CVE-2020-9806](https://patchblox.com/security/data/cve/CVE-2020-9806.md) | High | iTunes: A memory corruption issue was addressed with improved state management. | 8.8 | 0.0186 | | | [CVE-2019-8782](https://patchblox.com/security/data/cve/CVE-2019-8782.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0186 | | | [CVE-2019-8808](https://patchblox.com/security/data/cve/CVE-2019-8808.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0186 | | | [CVE-2020-3865](https://patchblox.com/security/data/cve/CVE-2020-3865.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0186 | | | [CVE-2020-9807](https://patchblox.com/security/data/cve/CVE-2020-9807.md) | High | iTunes: A memory corruption issue was addressed with improved state management. | 8.8 | 0.0185 | | | [CVE-2020-9803](https://patchblox.com/security/data/cve/CVE-2020-9803.md) | High | iTunes: A memory corruption issue was addressed with improved validation. | 8.8 | 0.0185 | | | [CVE-2019-8766](https://patchblox.com/security/data/cve/CVE-2019-8766.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0172 | | | [CVE-2019-8710](https://patchblox.com/security/data/cve/CVE-2019-8710.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0156 | | | [CVE-2019-8743](https://patchblox.com/security/data/cve/CVE-2019-8743.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0156 | | | [CVE-2020-9925](https://patchblox.com/security/data/cve/CVE-2020-9925.md) | High | iTunes: A logic issue was addressed with improved state management. | 7.1 | 0.0127 | | | [CVE-2020-9805](https://patchblox.com/security/data/cve/CVE-2020-9805.md) | High | iTunes: A logic issue was addressed with improved restrictions. | 7.1 | 0.0121 | | | [CVE-2020-9843](https://patchblox.com/security/data/cve/CVE-2020-9843.md) | High | iTunes: An input validation issue was addressed with improved input validation. | 7.1 | 0.0116 | | | [CVE-2020-3864](https://patchblox.com/security/data/cve/CVE-2020-3864.md) | High | iTunes: A logic issue was addressed with improved validation. | 7.8 | 0.0040 | | | [CVE-2020-3862](https://patchblox.com/security/data/cve/CVE-2020-3862.md) | Routine | iTunes: A denial of service issue was addressed with improved memory handling. | 6.5 | 0.0201 | | | [CVE-2020-3885](https://patchblox.com/security/data/cve/CVE-2020-3885.md) | Routine | iTunes: A logic issue was addressed with improved restrictions. | 4.3 | 0.0171 | | | [CVE-2020-9915](https://patchblox.com/security/data/cve/CVE-2020-9915.md) | Routine | iTunes: An access issue existed in Content Security Policy. | 6.5 | 0.0150 | | | [CVE-2020-3867](https://patchblox.com/security/data/cve/CVE-2020-3867.md) | Routine | iTunes: A logic issue was addressed with improved state management. | 6.1 | 0.0139 | | | [CVE-2019-8813](https://patchblox.com/security/data/cve/CVE-2019-8813.md) | Routine | iTunes: A logic issue was addressed with improved state management. | 6.1 | 0.0132 | | | [CVE-2019-8769](https://patchblox.com/security/data/cve/CVE-2019-8769.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 4.3 | 0.0124 | | | [CVE-2019-8625](https://patchblox.com/security/data/cve/CVE-2019-8625.md) | Routine | iTunes: A logic issue was addressed with improved state management. | 6.1 | 0.0122 | | | [CVE-2020-3902](https://patchblox.com/security/data/cve/CVE-2020-3902.md) | Routine | iTunes: An input validation issue was addressed with improved input validation. | 6.1 | 0.0115 | | | [CVE-2020-3894](https://patchblox.com/security/data/cve/CVE-2020-3894.md) | Routine | iTunes: A race condition was addressed with additional validation. | 3.1 | 0.0114 | | | [CVE-2019-8771](https://patchblox.com/security/data/cve/CVE-2019-8771.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 6.1 | 0.0104 | | | [CVE-2019-8764](https://patchblox.com/security/data/cve/CVE-2019-8764.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 6.1 | 0.0097 | | | [CVE-2020-14391](https://patchblox.com/security/data/cve/CVE-2020-14391.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 5.5 | 0.0032 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo