# RHSA-2020:4647: Security update for 6 packages RHSA-2020:4647, released November 4, 2020, fixes 25 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2020-4647 - Platform: Linux - Released: Nov 4, 2020 - Priority: High (Closes CVE-2020-13396, high severity) - CVEs: 25, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2020:4647 ## Applies to | Product | Release | Fixed in | |---|---|---| | [freerdp](https://patchblox.com/security/data/product/linux/freerdp.md) | RHEL 8 | 2:2.1.1-1.el8 | | [freerdp-devel](https://patchblox.com/security/data/product/linux/freerdp-devel.md) | RHEL 8 | 2:2.1.1-1.el8 | | [freerdp-libs](https://patchblox.com/security/data/product/linux/freerdp-libs.md) | RHEL 8 | 2:2.1.1-1.el8 | | [libwinpr](https://patchblox.com/security/data/product/linux/libwinpr.md) | RHEL 8 | 2:2.1.1-1.el8 | | [libwinpr-devel](https://patchblox.com/security/data/product/linux/libwinpr-devel.md) | RHEL 8 | 2:2.1.1-1.el8 | | [vinagre](https://patchblox.com/security/data/product/linux/vinagre.md) | RHEL 8 | 0:3.22.0-23.el8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-13396](https://patchblox.com/security/data/cve/CVE-2020-13396.md) | High | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 7.1 | 0.0234 | | | [CVE-2020-11522](https://patchblox.com/security/data/cve/CVE-2020-11522.md) | Routine | libwinpr2-2: libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read. | 6.5 | 0.0272 | | | [CVE-2020-11019](https://patchblox.com/security/data/cve/CVE-2020-11019.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.5 | 0.0228 | | | [CVE-2020-11526](https://patchblox.com/security/data/cve/CVE-2020-11526.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0200 | | | [CVE-2020-11043](https://patchblox.com/security/data/cve/CVE-2020-11043.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.7 | 0.0196 | | | [CVE-2020-11018](https://patchblox.com/security/data/cve/CVE-2020-11018.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.5 | 0.0190 | | | [CVE-2020-11048](https://patchblox.com/security/data/cve/CVE-2020-11048.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0185 | | | [CVE-2020-11042](https://patchblox.com/security/data/cve/CVE-2020-11042.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.9 | 0.0177 | | | [CVE-2020-11085](https://patchblox.com/security/data/cve/CVE-2020-11085.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 3.5 | 0.0175 | | | [CVE-2020-11047](https://patchblox.com/security/data/cve/CVE-2020-11047.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.9 | 0.0171 | | | [CVE-2020-11045](https://patchblox.com/security/data/cve/CVE-2020-11045.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 3.3 | 0.0170 | | | [CVE-2020-11044](https://patchblox.com/security/data/cve/CVE-2020-11044.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0169 | | | [CVE-2020-11525](https://patchblox.com/security/data/cve/CVE-2020-11525.md) | Routine | freerdp-x11: libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read. | 2.2 | 0.0168 | | | [CVE-2020-11058](https://patchblox.com/security/data/cve/CVE-2020-11058.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0161 | | | [CVE-2020-11040](https://patchblox.com/security/data/cve/CVE-2020-11040.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.7 | 0.0161 | | | [CVE-2020-11049](https://patchblox.com/security/data/cve/CVE-2020-11049.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0152 | | | [CVE-2020-11086](https://patchblox.com/security/data/cve/CVE-2020-11086.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0143 | | | [CVE-2020-11087](https://patchblox.com/security/data/cve/CVE-2020-11087.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0143 | | | [CVE-2020-11088](https://patchblox.com/security/data/cve/CVE-2020-11088.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0143 | | | [CVE-2020-11041](https://patchblox.com/security/data/cve/CVE-2020-11041.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.7 | 0.0138 | | | [CVE-2020-11046](https://patchblox.com/security/data/cve/CVE-2020-11046.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0132 | | | [CVE-2020-11038](https://patchblox.com/security/data/cve/CVE-2020-11038.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0121 | | | [CVE-2020-11089](https://patchblox.com/security/data/cve/CVE-2020-11089.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.5 | 0.0115 | | | [CVE-2020-11039](https://patchblox.com/security/data/cve/CVE-2020-11039.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.8 | 0.0113 | | | [CVE-2020-13397](https://patchblox.com/security/data/cve/CVE-2020-13397.md) | Routine | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.1 | 0.0054 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo