# RHSA-2020:4451: Security update for 7 packages RHSA-2020:4451, released November 4, 2020, fixes 57 CVEs across 7 products. 4 of them are being exploited (CVE-2021-30762); 4 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/rhsa-2020-4451 - Platform: Linux - Released: Nov 4, 2020 - Priority: Patch now (Closes CVE-2021-30762, exploited (CISA KEV)) - CVEs: 57, exploited: 4, on CISA KEV: 4 - Vendor advisory: https://access.redhat.com/errata/RHSA-2020:4451 ## Applies to | Product | Release | Fixed in | |---|---|---| | [LibRaw](https://patchblox.com/security/data/product/linux/libraw-libraw.md) | RHEL 8 | 0:0.19.5-2.el8 | | [LibRaw-devel](https://patchblox.com/security/data/product/linux/libraw-devel.md) | RHEL 8 | 0:0.19.5-2.el8 | | [gnome-settings-daemon](https://patchblox.com/security/data/product/linux/gnome-settings-daemon.md) | RHEL 8 | 0:3.32.0-11.el8 | | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | RHEL 8 | 0:2.28.4-1.el8 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | RHEL 8 | 0:2.28.4-1.el8 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | RHEL 8 | 0:2.28.4-1.el8 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | RHEL 8 | 0:2.28.4-1.el8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-30762](https://patchblox.com/security/data/cve/CVE-2021-30762.md) | Patch now | gnome-settings-daemon: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.1099 | CISA KEV | | [CVE-2021-30761](https://patchblox.com/security/data/cve/CVE-2021-30761.md) | Patch now | gnome-settings-daemon: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.1055 | CISA KEV | | [CVE-2021-30666](https://patchblox.com/security/data/cve/CVE-2021-30666.md) | Patch now | gnome-settings-daemon: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0300 | CISA KEV | | [CVE-2019-8720](https://patchblox.com/security/data/cve/CVE-2019-8720.md) | Patch now | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0156 | CISA KEV | | [CVE-2020-9850](https://patchblox.com/security/data/cve/CVE-2020-9850.md) | High | iTunes: A logic issue was addressed with improved restrictions. | 9.8 | 0.7740 | | | [CVE-2019-8820](https://patchblox.com/security/data/cve/CVE-2019-8820.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0962 | | | [CVE-2020-9802](https://patchblox.com/security/data/cve/CVE-2020-9802.md) | High | iTunes: A logic issue was addressed with improved restrictions. | 8.8 | 0.0827 | | | [CVE-2020-10018](https://patchblox.com/security/data/cve/CVE-2020-10018.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 7.5 | 0.0499 | | | [CVE-2020-3897](https://patchblox.com/security/data/cve/CVE-2020-3897.md) | High | iTunes: A type confusion issue was addressed with improved memory handling. | 8.8 | 0.0466 | | | [CVE-2020-9895](https://patchblox.com/security/data/cve/CVE-2020-9895.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 9.8 | 0.0449 | | | [CVE-2020-3899](https://patchblox.com/security/data/cve/CVE-2020-3899.md) | High | iTunes: A memory consumption issue was addressed with improved memory handling. | 8.8 | 0.0412 | | | [CVE-2020-15503](https://patchblox.com/security/data/cve/CVE-2020-15503.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 7.5 | 0.0367 | | | [CVE-2020-9893](https://patchblox.com/security/data/cve/CVE-2020-9893.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 8.8 | 0.0295 | | | [CVE-2020-11793](https://patchblox.com/security/data/cve/CVE-2020-11793.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0294 | | | [CVE-2020-9894](https://patchblox.com/security/data/cve/CVE-2020-9894.md) | High | iTunes: An out-of-bounds read was addressed with improved input validation. | 9.8 | 0.0284 | | | [CVE-2020-3868](https://patchblox.com/security/data/cve/CVE-2020-3868.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0270 | | | [CVE-2020-3895](https://patchblox.com/security/data/cve/CVE-2020-3895.md) | High | iTunes: A memory corruption issue was addressed with improved memory handling. | 8.8 | 0.0264 | | | [CVE-2019-8816](https://patchblox.com/security/data/cve/CVE-2019-8816.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0258 | | | [CVE-2019-8814](https://patchblox.com/security/data/cve/CVE-2019-8814.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0254 | | | [CVE-2019-8846](https://patchblox.com/security/data/cve/CVE-2019-8846.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 8.8 | 0.0234 | | | [CVE-2019-8815](https://patchblox.com/security/data/cve/CVE-2019-8815.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0229 | | | [CVE-2019-8844](https://patchblox.com/security/data/cve/CVE-2019-8844.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0227 | | | [CVE-2019-8835](https://patchblox.com/security/data/cve/CVE-2019-8835.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0211 | | | [CVE-2019-8811](https://patchblox.com/security/data/cve/CVE-2019-8811.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0200 | | | [CVE-2019-8783](https://patchblox.com/security/data/cve/CVE-2019-8783.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0195 | | | [CVE-2020-9862](https://patchblox.com/security/data/cve/CVE-2020-9862.md) | High | iTunes: A command injection issue existed in Web Inspector. | 7.8 | 0.0192 | | | [CVE-2019-8819](https://patchblox.com/security/data/cve/CVE-2019-8819.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0192 | | | [CVE-2019-8823](https://patchblox.com/security/data/cve/CVE-2019-8823.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0192 | | | [CVE-2020-3901](https://patchblox.com/security/data/cve/CVE-2020-3901.md) | High | iTunes: A type confusion issue was addressed with improved memory handling. | 8.8 | 0.0191 | | | [CVE-2020-3900](https://patchblox.com/security/data/cve/CVE-2020-3900.md) | High | iTunes: A memory corruption issue was addressed with improved memory handling. | 8.8 | 0.0190 | | | [CVE-2019-8812](https://patchblox.com/security/data/cve/CVE-2019-8812.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0189 | | | [CVE-2020-9806](https://patchblox.com/security/data/cve/CVE-2020-9806.md) | High | iTunes: A memory corruption issue was addressed with improved state management. | 8.8 | 0.0186 | | | [CVE-2019-8782](https://patchblox.com/security/data/cve/CVE-2019-8782.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0186 | | | [CVE-2019-8808](https://patchblox.com/security/data/cve/CVE-2019-8808.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0186 | | | [CVE-2020-3865](https://patchblox.com/security/data/cve/CVE-2020-3865.md) | High | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0186 | | | [CVE-2020-9807](https://patchblox.com/security/data/cve/CVE-2020-9807.md) | High | iTunes: A memory corruption issue was addressed with improved state management. | 8.8 | 0.0185 | | | [CVE-2020-9803](https://patchblox.com/security/data/cve/CVE-2020-9803.md) | High | iTunes: A memory corruption issue was addressed with improved validation. | 8.8 | 0.0185 | | | [CVE-2019-8766](https://patchblox.com/security/data/cve/CVE-2019-8766.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0172 | | | [CVE-2019-8710](https://patchblox.com/security/data/cve/CVE-2019-8710.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0156 | | | [CVE-2019-8743](https://patchblox.com/security/data/cve/CVE-2019-8743.md) | High | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0156 | | | [CVE-2020-9952](https://patchblox.com/security/data/cve/CVE-2020-9952.md) | High | gnome-settings-daemon: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 7.1 | 0.0150 | | | [CVE-2020-9925](https://patchblox.com/security/data/cve/CVE-2020-9925.md) | High | iTunes: A logic issue was addressed with improved state management. | 7.1 | 0.0127 | | | [CVE-2020-9805](https://patchblox.com/security/data/cve/CVE-2020-9805.md) | High | iTunes: A logic issue was addressed with improved restrictions. | 7.1 | 0.0121 | | | [CVE-2020-9843](https://patchblox.com/security/data/cve/CVE-2020-9843.md) | High | iTunes: An input validation issue was addressed with improved input validation. | 7.1 | 0.0116 | | | [CVE-2020-3864](https://patchblox.com/security/data/cve/CVE-2020-3864.md) | High | iTunes: A logic issue was addressed with improved validation. | 7.8 | 0.0040 | | | [CVE-2020-3862](https://patchblox.com/security/data/cve/CVE-2020-3862.md) | Routine | iTunes: A denial of service issue was addressed with improved memory handling. | 6.5 | 0.0201 | | | [CVE-2020-3885](https://patchblox.com/security/data/cve/CVE-2020-3885.md) | Routine | iTunes: A logic issue was addressed with improved restrictions. | 4.3 | 0.0171 | | | [CVE-2020-9915](https://patchblox.com/security/data/cve/CVE-2020-9915.md) | Routine | iTunes: An access issue existed in Content Security Policy. | 6.5 | 0.0150 | | | [CVE-2020-3867](https://patchblox.com/security/data/cve/CVE-2020-3867.md) | Routine | iTunes: A logic issue was addressed with improved state management. | 6.1 | 0.0139 | | | [CVE-2019-8813](https://patchblox.com/security/data/cve/CVE-2019-8813.md) | Routine | iTunes: A logic issue was addressed with improved state management. | 6.1 | 0.0132 | | | [CVE-2019-8769](https://patchblox.com/security/data/cve/CVE-2019-8769.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 4.3 | 0.0124 | | | [CVE-2019-8625](https://patchblox.com/security/data/cve/CVE-2019-8625.md) | Routine | iTunes: A logic issue was addressed with improved state management. | 6.1 | 0.0122 | | | [CVE-2020-3902](https://patchblox.com/security/data/cve/CVE-2020-3902.md) | Routine | iTunes: An input validation issue was addressed with improved input validation. | 6.1 | 0.0115 | | | [CVE-2020-3894](https://patchblox.com/security/data/cve/CVE-2020-3894.md) | Routine | iTunes: A race condition was addressed with additional validation. | 3.1 | 0.0114 | | | [CVE-2019-8771](https://patchblox.com/security/data/cve/CVE-2019-8771.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 6.1 | 0.0104 | | | [CVE-2019-8764](https://patchblox.com/security/data/cve/CVE-2019-8764.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 6.1 | 0.0097 | | | [CVE-2020-14391](https://patchblox.com/security/data/cve/CVE-2020-14391.md) | Routine | webkit2gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 5.5 | 0.0032 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo