Linux · Security advisory · May 5, 2020
ELSA-2020-1766: Security update for 56 packages
ELSA-2020-1766, released May 5, 2020, fixes 5 CVEs across 56 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0215
82nd percentile
Priority of the 5 CVEs
Patch now 0
Urgent 0
High 3
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| LibRaw | ol 8 | 0:0.19.5-1.el8 |
| LibRaw-devel | ol 8 | 0:0.19.5-1.el8 |
| accountsservice | ol 8 | 0:0.6.50-8.el8 |
| accountsservice-devel | ol 8 | 0:0.6.50-8.el8 |
| accountsservice-libs | ol 8 | 0:0.6.50-8.el8 |
| appstream-data | ol 8 | 0:8-20191129.el8 |
| clutter | ol 8 | 0:1.26.2-8.el8 |
| clutter-devel | ol 8 | 0:1.26.2-8.el8 |
| clutter-doc | ol 8 | 0:1.26.2-8.el8 |
| evince | ol 8 | 0:3.28.4-4.el8 |
| evince-browser-plugin | ol 8 | 0:3.28.4-4.el8 |
| evince-libs | ol 8 | 0:3.28.4-4.el8 |
| evince-nautilus | ol 8 | 0:3.28.4-4.el8 |
| gdm | ol 8 | 1:3.28.3-29.el8 |
| gjs | ol 8 | 0:1.56.2-4.el8 |
| gjs-devel | ol 8 | 0:1.56.2-4.el8 |
| gnome-boxes | ol 8 | 0:3.28.5-8.el8 |
| gnome-control-center | ol 8 | 0:3.28.2-19.el8 |
| gnome-control-center-filesystem | ol 8 | 0:3.28.2-19.el8 |
| gnome-menus | ol 8 | 0:3.13.3-11.el8 |
| gnome-menus-devel | ol 8 | 0:3.13.3-11.el8 |
| gnome-online-accounts | ol 8 | 0:3.28.2-1.el8 |
| gnome-online-accounts-devel | ol 8 | 0:3.28.2-1.el8 |
| gnome-remote-desktop | ol 8 | 0:0.1.6-8.el8 |
| gnome-session | ol 8 | 0:3.28.1-8.el8 |
| gnome-session-wayland-session | ol 8 | 0:3.28.1-8.el8 |
| gnome-session-xsession | ol 8 | 0:3.28.1-8.el8 |
| gnome-settings-daemon | ol 8 | 0:3.32.0-9.el8 |
| gnome-shell | ol 8 | 0:3.32.2-14.el8 |
| gnome-software | ol 8 | 0:3.30.6-3.el8 |
| gnome-software-editor | ol 8 | 0:3.30.6-3.el8 |
| gnome-terminal | ol 8 | 0:3.28.3-1.el8 |
| gnome-terminal-nautilus | ol 8 | 0:3.28.3-1.el8 |
| gnome-tweaks | ol 8 | 0:3.28.1-7.el8 |
| gsettings-desktop-schemas | ol 8 | 0:3.32.0-4.el8 |
| gsettings-desktop-schemas-devel | ol 8 | 0:3.32.0-4.el8 |
| gtk-update-icon-cache | ol 8 | 0:3.22.30-5.el8 |
| gtk3 | ol 8 | 0:3.22.30-5.el8 |
| gtk3-devel | ol 8 | 0:3.22.30-5.el8 |
| gtk3-immodule-xim | ol 8 | 0:3.22.30-5.el8 |
| libvncserver | ol 8 | 0:0.9.11-14.el8 |
| libvncserver-devel | ol 8 | 0:0.9.11-14.el8 |
| libxslt | ol 8 | 0:1.1.32-4.0.1.el8 |
| libxslt-devel | ol 8 | 0:1.1.32-4.0.1.el8 |
| mozjs52 | ol 8 | 0:52.9.0-2.0.1.el8 |
| mozjs52-devel | ol 8 | 0:52.9.0-2.0.1.el8 |
| mozjs60 | ol 8 | 0:60.9.0-4.0.1.el8 |
| mozjs60-devel | ol 8 | 0:60.9.0-4.0.1.el8 |
| mutter | ol 8 | 0:3.32.2-34.el8 |
| mutter-devel | ol 8 | 0:3.32.2-34.el8 |
| nautilus | ol 8 | 0:3.28.1-12.el8 |
| nautilus-devel | ol 8 | 0:3.28.1-12.el8 |
| nautilus-extensions | ol 8 | 0:3.28.1-12.el8 |
| vala | ol 8 | 0:0.40.19-1.el8 |
| vala-devel | ol 8 | 0:0.40.19-1.el8 |
| vinagre | ol 8 | 0:3.22.0-21.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2018-20337 | gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 8.8 | 0.0215 | None reported | |
| High | CVE-2019-12447 | clutter-devel: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 7.3 | 0.0181 | None reported | |
| High | CVE-2019-12448 | accountsservice: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 8.1 | 0.0176 | None reported | |
| Routine | CVE-2019-12449 | accountsservice: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe... | 5.7 | 0.0182 | None reported | |
| Routine | CVE-2019-3825 | gdm3: A vulnerability was discovered in gdm before 3.31.4 | 6.4 | 0.0051 | None reported |
Showing 1 to 5 of 5
1