Linux · Security advisory · July 15, 2020

RHSA-2020:2954: Security update for 11 packages

RHSA-2020:2954, released July 15, 2020, fixes 1 CVE across 11 products. One of them is being exploited (CVE-2020-1147); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

1 rated Critical

Exploited

CVE-2020-1147

Exploitation more likely

Vendor assessment

Highest EPSS

0.9580

99th percentile

Fixed package versions

Product	Release	Fixed in
aspnetcore-runtime-3.1	RHEL 8	0:3.1.6-1.el8_2
aspnetcore-targeting-pack-3.1	RHEL 8	0:3.1.6-1.el8_2
dotnet	RHEL 8	0:3.1.106-1.el8_2
dotnet-apphost-pack-3.1	RHEL 8	0:3.1.6-1.el8_2
dotnet-host	RHEL 8	0:3.1.6-1.el8_2
dotnet-hostfxr-3.1	RHEL 8	0:3.1.6-1.el8_2
dotnet-runtime-3.1	RHEL 8	0:3.1.6-1.el8_2
dotnet-sdk-3.1	RHEL 8	0:3.1.106-1.el8_2
dotnet-targeting-pack-3.1	RHEL 8	0:3.1.6-1.el8_2
dotnet-templates-3.1	RHEL 8	0:3.1.106-1.el8_2
netstandard-targeting-pack-2.1	RHEL 8	0:3.1.106-1.el8_2

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2020-1147	.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability		8.8	0.9580	KEVExploited

Also fixes CVE-2020-1147

KB4580330
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems and 4 more
KB4580328
Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems and 3 more
KB4580346
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 and 5 more
KB4580327
Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems, Windows 10 for 32-bit Systems and 1 more
KB4484436
Microsoft SharePoint Enterprise Server 2016
KB4484453
Microsoft SharePoint Server 2019
KB4484443
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
KB4484460
Microsoft SharePoint Server 2010 Service Pack 2

Vendor advisory

https://access.redhat.com/errata/RHSA-2020:2954

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo