Linux · Security advisory · November 10, 2020

ELSA-2020-4627: Security update for 2 packages

ELSA-2020-4627, released November 10, 2020, fixes 11 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0354

89th percentile

Priority of the 11 CVEs

Patch now 0
                                Urgent 0
                                High 11
                                Routine 0

Fixed package versions

Product	Release	Fixed in
SDL	ol 8	0:1.2.15-38.el8
SDL-devel	ol 8	0:1.2.15-38.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2019-7635	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0354	None reported
High	CVE-2019-7577	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0321	None reported
High	CVE-2019-7573	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0317	None reported
High	CVE-2019-7637	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0310	None reported
High	CVE-2019-7574	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0301	None reported
High	CVE-2019-7576	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0297	None reported
High	CVE-2019-7638	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0295	None reported
High	CVE-2019-7575	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0294	None reported
High	CVE-2019-7578	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0292	None reported
High	CVE-2019-7636	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0287	None reported
High	CVE-2019-7572	SDL: Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics...	8.8	0.0279	None reported