Linux · Security advisory · July 14, 2020

ELSA-2020-2902: Security update for 7 packages

ELSA-2020-2902, released July 14, 2020, fixes 2 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0304
87th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
sane-backendsol 80:1.0.27-19.el8_2.1
sane-backends-daemonol 80:1.0.27-19.el8_2.1
sane-backends-develol 80:1.0.27-19.el8_2.1
sane-backends-docol 80:1.0.27-19.el8_2.1
sane-backends-drivers-camerasol 80:1.0.27-19.el8_2.1
sane-backends-drivers-scannersol 80:1.0.27-19.el8_2.1
sane-backends-libsol 80:1.0.27-19.el8_2.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-12861 sane-backends: Scanner Access Now Easy (SANE) is a universal scanner interface 8.8 0.0304 None reported
High CVE-2020-12865 sane-backends: Scanner Access Now Easy (SANE) is a universal scanner interface 8.0 0.0146 None reported
Showing 1 to 2 of 2 1