Linux · Security advisory · November 4, 2020

RHSA-2020:4659: Security update for 2 packages

RHSA-2020:4659, released November 4, 2020, fixes 3 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.7150

99th percentile

Patch now 0
                                Urgent 0
                                High 3
                                Routine 0

Fixed package versions

Product	Release	Fixed in
gd	RHEL 8	0:2.2.5-7.el8
gd-devel	RHEL 8	0:2.2.5-7.el8

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2019-6977	gd: GD is an open source code library for the dynamic creation of images by programmers	8.8	0.7150	None reported
High	CVE-2019-6978	libwmf-devel: The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics	9.8	0.0445	None reported
High	CVE-2018-14553	libgd-tools: gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointerdereference allowing attackers to crash an ap...	7.5	0.0344	None reported