Linux · Security advisory · November 10, 2020

ELSA-2020-4766: Security update for 2 packages

ELSA-2020-4766, released November 10, 2020, fixes 8 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0426
91st percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 5 Routine 3

Fixed package versions

ProductReleaseFixed in
libexifol 80:0.6.22-4.el8
libexif-develol 80:0.6.22-4.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-0198 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 7.5 0.0426 None reported
High CVE-2019-9278 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 8.8 0.0406 None reported
High CVE-2020-0181 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 8.2 0.0286 None reported
High CVE-2020-13114 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 7.5 0.0236 None reported
High CVE-2020-13113 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 8.2 0.0193 None reported
Routine CVE-2020-0182 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 6.5 0.0113 None reported
Routine CVE-2020-12767 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 6.2 0.0053 None reported
Routine CVE-2020-0093 libexif: The libexif packages provide a library for extracting extra information from image files. The following packages hav... 5.0 0.0030 None reported
Showing 1 to 8 of 8 1