Linux · Oracle Linux · Security advisory · May 5, 2020

ELSA-2020-1766: Security update for 56 packages

ELSA-2020-1766, released May 5, 2020, fixes 5 CVEs across 56 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0206
81st percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 3 Routine 2

Fixed package versions

ProductReleaseFixed in
LibRawol 80:0.19.5-1.el8
LibRaw-develol 80:0.19.5-1.el8
accountsserviceol 80:0.6.50-8.el8
accountsservice-develol 80:0.6.50-8.el8
accountsservice-libsol 80:0.6.50-8.el8
appstream-dataol 80:8-20191129.el8
clutterol 80:1.26.2-8.el8
clutter-develol 80:1.26.2-8.el8
clutter-docol 80:1.26.2-8.el8
evinceol 80:3.28.4-4.el8
evince-browser-pluginol 80:3.28.4-4.el8
evince-libsol 80:3.28.4-4.el8
evince-nautilusol 80:3.28.4-4.el8
gdmol 81:3.28.3-29.el8
gjsol 80:1.56.2-4.el8
gjs-develol 80:1.56.2-4.el8
gnome-boxesol 80:3.28.5-8.el8
gnome-control-centerol 80:3.28.2-19.el8
gnome-control-center-filesystemol 80:3.28.2-19.el8
gnome-menusol 80:3.13.3-11.el8
gnome-menus-develol 80:3.13.3-11.el8
gnome-online-accountsol 80:3.28.2-1.el8
gnome-online-accounts-develol 80:3.28.2-1.el8
gnome-remote-desktopol 80:0.1.6-8.el8
gnome-sessionol 80:3.28.1-8.el8
gnome-session-wayland-sessionol 80:3.28.1-8.el8
gnome-session-xsessionol 80:3.28.1-8.el8
gnome-settings-daemonol 80:3.32.0-9.el8
gnome-shellol 80:3.32.2-14.el8
gnome-softwareol 80:3.30.6-3.el8
gnome-software-editorol 80:3.30.6-3.el8
gnome-terminalol 80:3.28.3-1.el8
gnome-terminal-nautilusol 80:3.28.3-1.el8
gnome-tweaksol 80:3.28.1-7.el8
gsettings-desktop-schemasol 80:3.32.0-4.el8
gsettings-desktop-schemas-develol 80:3.32.0-4.el8
gtk-update-icon-cacheol 80:3.22.30-5.el8
gtk3ol 80:3.22.30-5.el8
gtk3-develol 80:3.22.30-5.el8
gtk3-immodule-ximol 80:3.22.30-5.el8
libvncserverol 80:0.9.11-14.el8
libvncserver-develol 80:0.9.11-14.el8
libxsltol 80:1.1.32-4.0.1.el8
libxslt-develol 80:1.1.32-4.0.1.el8
mozjs52ol 80:52.9.0-2.0.1.el8
mozjs52-develol 80:52.9.0-2.0.1.el8
mozjs60ol 80:60.9.0-4.0.1.el8
mozjs60-develol 80:60.9.0-4.0.1.el8
mutterol 80:3.32.2-34.el8
mutter-develol 80:3.32.2-34.el8
nautilusol 80:3.28.1-12.el8
nautilus-develol 80:3.28.1-12.el8
nautilus-extensionsol 80:3.28.1-12.el8
valaol 80:0.40.19-1.el8
vala-develol 80:0.40.19-1.el8
vinagreol 80:3.22.0-21.el8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2018-20337 gtk3: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe...8.8 0.0206 None reported
High CVE-2019-12447 clutter-devel: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe...7.3 0.0174 None reported
High CVE-2019-12448 accountsservice: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe...8.1 0.0169 None reported
Routine CVE-2019-12449 accountsservice: GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fix(es): * LibRaw: stack-based buffe...5.7 0.0174 None reported
Routine CVE-2019-3825 gdm3: A vulnerability was discovered in gdm before 3.31.46.4 0.0051 None reported
Showing 1 to 5 of 5 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.