Linux · Security advisory · September 9, 2020

ELSA-2020-3658: Security update for 2 packages

ELSA-2020-3658, released September 9, 2020, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0253
84th percentile

Fixed package versions

ProductReleaseFixed in
librepool 80:1.11.0-3.el8_2
python3-librepool 80:1.11.0-3.el8_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-14352 librepo: The librepo library provides a C and Python API to download repository metadata. Security Fix(es): * librepo: missi... 8.0 0.0253 None reported
Showing 1 to 1 of 1 1