Linux · Security advisory · April 28, 2020
RHSA-2020:1577: Security update for 8 packages
RHSA-2020:1577, released April 28, 2020, fixes 29 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
29
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0430
91st percentile
Priority of the 29 CVEs
Patch now 0
Urgent 0
High 4
Routine 25
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| exiv2 | RHEL 8 | 0:0.27.2-5.el8 |
| exiv2-devel | RHEL 8 | 0:0.27.2-5.el8 |
| exiv2-doc | RHEL 8 | 0:0.27.2-5.el8 |
| exiv2-libs | RHEL 8 | 0:0.27.2-5.el8 |
| gegl | RHEL 8 | 0:0.2.0-39.el8 |
| gnome-color-manager | RHEL 8 | 0:3.28.0-3.el8 |
| libgexiv2 | RHEL 8 | 0:0.10.8-4.el8 |
| libgexiv2-devel | RHEL 8 | 0:0.10.8-4.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-20421 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 7.5 | 0.0430 | None reported | |
| High | CVE-2019-9143 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 8.8 | 0.0277 | None reported | |
| High | CVE-2018-9305 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 8.1 | 0.0192 | None reported | |
| High | CVE-2018-14338 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 8.1 | 0.0143 | None reported | |
| Routine | CVE-2018-20096 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0276 | None reported | |
| Routine | CVE-2018-20098 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0257 | None reported | |
| Routine | CVE-2018-19607 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0252 | None reported | |
| Routine | CVE-2018-17581 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0235 | None reported | |
| Routine | CVE-2018-11037 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0230 | None reported | |
| Routine | CVE-2018-20099 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0229 | None reported | |
| Routine | CVE-2018-20097 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0229 | None reported | |
| Routine | CVE-2018-17229 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0221 | None reported | |
| Routine | CVE-2018-17230 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0221 | None reported | |
| Routine | CVE-2018-17282 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0215 | None reported | |
| Routine | CVE-2019-13113 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0213 | None reported | |
| Routine | CVE-2019-13114 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0212 | None reported | |
| Routine | CVE-2018-19535 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0209 | None reported | |
| Routine | CVE-2018-18915 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0199 | None reported | |
| Routine | CVE-2019-13112 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0198 | None reported | |
| Routine | CVE-2018-19108 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0194 | None reported | |
| Routine | CVE-2018-19107 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0182 | None reported | |
| Routine | CVE-2018-9304 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0168 | None reported | |
| Routine | CVE-2018-4868 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 5.5 | 0.0160 | None reported | |
| Routine | CVE-2019-13109 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0158 | None reported | |
| Routine | CVE-2018-10772 | gnome-color-manager: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC,... | 6.5 | 0.0155 | None reported |
Showing 1 to 25 of 29
1Next