Linux · Security advisory · November 13, 2020
ELSA-2020-4952: Security update for 2 packages
ELSA-2020-4952, released November 13, 2020, fixes 1 CVE across 2 products. One of them is being exploited (CVE-2020-15999); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2020-15999
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6389
99th percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| freetype | ol 8 | 0:2.9.1-4.el8_3.1 |
| freetype-devel | ol 8 | 0:2.9.1-4.el8_3.1 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2020-15999 | freetype2-demos: Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111allowed a remote attacker to potentially expl... | 8.6 | 0.6389 | KEVExploited |
Showing 1 to 1 of 1
1