Linux · Security advisory · May 5, 2020

ELSA-2020-1688: Security update for 2 packages

ELSA-2020-1688, released May 5, 2020, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0420

91st percentile

Fixed package versions

Product	Release	Fixed in
libtiff	ol 8	0:4.0.9-17.el8
libtiff-devel	ol 8	0:4.0.9-17.el8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2019-14973	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...		6.5	0.0420	None reported

Also fixes CVE-2019-14973

libtiff-opengl 4.0.9-5ubuntu0.3
libtiff-opengl on Ubuntu 18.04.6 LTS (bionic)
libtiff-tools 4.0.9-5ubuntu0.3
libtiff-tools on Ubuntu 18.04.6 LTS (bionic)
libtiff5 4.0.9-5ubuntu0.3
libtiff5 on Ubuntu 18.04.6 LTS (bionic)
libtiffxx5 4.0.9-5ubuntu0.3
libtiffxx5 on Ubuntu 18.04.6 LTS (bionic)
RHSA-2020:1688
libtiff, libtiff-devel, libtiff-tools on RHEL 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2020-1688.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo