# ELSA-2021-4381: Security update for 57 packages ELSA-2021-4381, released November 16, 2021, fixes 29 CVEs across 57 products. 5 of them are being exploited (CVE-2021-1789); 5 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/elsa-2021-4381 - Platform: Linux - Released: Nov 16, 2021 - Priority: Patch now (Closes CVE-2021-1789, exploited (CISA KEV)) - CVEs: 29, exploited: 5, on CISA KEV: 5 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2021-4381.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [LibRaw](https://patchblox.com/security/data/product/linux/libraw-libraw.md) | ol 8 | 0:0.19.5-3.el8 | | [LibRaw-devel](https://patchblox.com/security/data/product/linux/libraw-devel.md) | ol 8 | 0:0.19.5-3.el8 | | [accountsservice](https://patchblox.com/security/data/product/linux/accountsservice.md) | ol 8 | 0:0.6.55-2.el8 | | [accountsservice-devel](https://patchblox.com/security/data/product/linux/accountsservice-devel.md) | ol 8 | 0:0.6.55-2.el8 | | [accountsservice-libs](https://patchblox.com/security/data/product/linux/accountsservice-libs.md) | ol 8 | 0:0.6.55-2.el8 | | [gdm](https://patchblox.com/security/data/product/linux/gdm.md) | ol 8 | 1:40.0-15.el8 | | [gnome-autoar](https://patchblox.com/security/data/product/linux/gnome-autoar.md) | ol 8 | 0:0.2.3-2.el8 | | [gnome-calculator](https://patchblox.com/security/data/product/linux/gnome-calculator.md) | ol 8 | 0:3.28.2-2.el8 | | [gnome-classic-session](https://patchblox.com/security/data/product/linux/gnome-classic-session.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-control-center](https://patchblox.com/security/data/product/linux/gnome-control-center.md) | ol 8 | 0:3.28.2-28.el8 | | [gnome-control-center-filesystem](https://patchblox.com/security/data/product/linux/gnome-control-center-filesystem.md) | ol 8 | 0:3.28.2-28.el8 | | [gnome-online-accounts](https://patchblox.com/security/data/product/linux/gnome-online-accounts.md) | ol 8 | 0:3.28.2-3.el8 | | [gnome-online-accounts-devel](https://patchblox.com/security/data/product/linux/gnome-online-accounts-devel.md) | ol 8 | 0:3.28.2-3.el8 | | [gnome-session](https://patchblox.com/security/data/product/linux/gnome-session.md) | ol 8 | 0:3.28.1-13.0.1.el8 | | [gnome-session-kiosk-session](https://patchblox.com/security/data/product/linux/gnome-session-kiosk-session.md) | ol 8 | 0:3.28.1-13.0.1.el8 | | [gnome-session-wayland-session](https://patchblox.com/security/data/product/linux/gnome-session-wayland-session.md) | ol 8 | 0:3.28.1-13.0.1.el8 | | [gnome-session-xsession](https://patchblox.com/security/data/product/linux/gnome-session-xsession.md) | ol 8 | 0:3.28.1-13.0.1.el8 | | [gnome-settings-daemon](https://patchblox.com/security/data/product/linux/gnome-settings-daemon.md) | ol 8 | 0:3.32.0-16.el8 | | [gnome-shell](https://patchblox.com/security/data/product/linux/gnome-shell.md) | ol 8 | 0:3.32.2-40.el8 | | [gnome-shell-extension-apps-menu](https://patchblox.com/security/data/product/linux/gnome-shell-extension-apps-menu.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-auto-move-windows](https://patchblox.com/security/data/product/linux/gnome-shell-extension-auto-move-windows.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-common](https://patchblox.com/security/data/product/linux/gnome-shell-extension-common.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-dash-to-dock](https://patchblox.com/security/data/product/linux/gnome-shell-extension-dash-to-dock.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-desktop-icons](https://patchblox.com/security/data/product/linux/gnome-shell-extension-desktop-icons.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-disable-screenshield](https://patchblox.com/security/data/product/linux/gnome-shell-extension-disable-screenshield.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-drive-menu](https://patchblox.com/security/data/product/linux/gnome-shell-extension-drive-menu.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-gesture-inhibitor](https://patchblox.com/security/data/product/linux/gnome-shell-extension-gesture-inhibitor.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-horizontal-workspaces](https://patchblox.com/security/data/product/linux/gnome-shell-extension-horizontal-workspaces.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-launch-new-instance](https://patchblox.com/security/data/product/linux/gnome-shell-extension-launch-new-instance.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-native-window-placement](https://patchblox.com/security/data/product/linux/gnome-shell-extension-native-window-placement.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-no-hot-corner](https://patchblox.com/security/data/product/linux/gnome-shell-extension-no-hot-corner.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-panel-favorites](https://patchblox.com/security/data/product/linux/gnome-shell-extension-panel-favorites.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-places-menu](https://patchblox.com/security/data/product/linux/gnome-shell-extension-places-menu.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-screenshot-window-sizer](https://patchblox.com/security/data/product/linux/gnome-shell-extension-screenshot-window-sizer.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-systemMonitor](https://patchblox.com/security/data/product/linux/gnome-shell-extension-systemmonitor.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-top-icons](https://patchblox.com/security/data/product/linux/gnome-shell-extension-top-icons.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-updates-dialog](https://patchblox.com/security/data/product/linux/gnome-shell-extension-updates-dialog.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-user-theme](https://patchblox.com/security/data/product/linux/gnome-shell-extension-user-theme.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-window-grouper](https://patchblox.com/security/data/product/linux/gnome-shell-extension-window-grouper.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-window-list](https://patchblox.com/security/data/product/linux/gnome-shell-extension-window-list.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-windowsNavigator](https://patchblox.com/security/data/product/linux/gnome-shell-extension-windowsnavigator.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-shell-extension-workspace-indicator](https://patchblox.com/security/data/product/linux/gnome-shell-extension-workspace-indicator.md) | ol 8 | 0:3.32.1-20.el8 | | [gnome-software](https://patchblox.com/security/data/product/linux/gnome-software.md) | ol 8 | 0:3.36.1-10.el8 | | [gnome-software-devel](https://patchblox.com/security/data/product/linux/gnome-software-devel.md) | ol 8 | 0:3.36.1-10.el8 | | [gsettings-desktop-schemas](https://patchblox.com/security/data/product/linux/gsettings-desktop-schemas.md) | ol 8 | 0:3.32.0-6.el8 | | [gsettings-desktop-schemas-devel](https://patchblox.com/security/data/product/linux/gsettings-desktop-schemas-devel.md) | ol 8 | 0:3.32.0-6.el8 | | [gtk-update-icon-cache](https://patchblox.com/security/data/product/linux/gtk-update-icon-cache.md) | ol 8 | 0:3.22.30-8.el8 | | [gtk3](https://patchblox.com/security/data/product/linux/gtk3.md) | ol 8 | 0:3.22.30-8.el8 | | [gtk3-devel](https://patchblox.com/security/data/product/linux/gtk3-devel.md) | ol 8 | 0:3.22.30-8.el8 | | [gtk3-immodule-xim](https://patchblox.com/security/data/product/linux/gtk3-immodule-xim.md) | ol 8 | 0:3.22.30-8.el8 | | [mutter](https://patchblox.com/security/data/product/linux/mutter.md) | ol 8 | 0:3.32.2-60.el8 | | [mutter-devel](https://patchblox.com/security/data/product/linux/mutter-devel.md) | ol 8 | 0:3.32.2-60.el8 | | [vino](https://patchblox.com/security/data/product/linux/vino.md) | ol 8 | 0:3.22.0-11.el8 | | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | ol 8 | 0:2.32.3-2.el8 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | ol 8 | 0:2.32.3-2.el8 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | ol 8 | 0:2.32.3-2.el8 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | ol 8 | 0:2.32.3-2.el8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-1789](https://patchblox.com/security/data/cve/CVE-2021-1789.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.1398 | CISA KEV | | [CVE-2021-1870](https://patchblox.com/security/data/cve/CVE-2021-1870.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0771 | CISA KEV | | [CVE-2021-1871](https://patchblox.com/security/data/cve/CVE-2021-1871.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0700 | CISA KEV | | [CVE-2021-30665](https://patchblox.com/security/data/cve/CVE-2021-30665.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0371 | CISA KEV | | [CVE-2021-30663](https://patchblox.com/security/data/cve/CVE-2021-30663.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0352 | CISA KEV | | [CVE-2021-21779](https://patchblox.com/security/data/cve/CVE-2021-21779.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0292 | | | [CVE-2021-21806](https://patchblox.com/security/data/cve/CVE-2021-21806.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0284 | | | [CVE-2021-1844](https://patchblox.com/security/data/cve/CVE-2021-1844.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0238 | | | [CVE-2021-30799](https://patchblox.com/security/data/cve/CVE-2021-30799.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0226 | | | [CVE-2021-30795](https://patchblox.com/security/data/cve/CVE-2021-30795.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0222 | | | [CVE-2021-30734](https://patchblox.com/security/data/cve/CVE-2021-30734.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0202 | | | [CVE-2021-30797](https://patchblox.com/security/data/cve/CVE-2021-30797.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0187 | | | [CVE-2020-13558](https://patchblox.com/security/data/cve/CVE-2020-13558.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0186 | | | [CVE-2021-1799](https://patchblox.com/security/data/cve/CVE-2021-1799.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0176 | | | [CVE-2021-30749](https://patchblox.com/security/data/cve/CVE-2021-30749.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0168 | | | [CVE-2021-1788](https://patchblox.com/security/data/cve/CVE-2021-1788.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0168 | | | [CVE-2021-30682](https://patchblox.com/security/data/cve/CVE-2021-30682.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0167 | | | [CVE-2021-30758](https://patchblox.com/security/data/cve/CVE-2021-30758.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0166 | | | [CVE-2020-24870](https://patchblox.com/security/data/cve/CVE-2020-24870.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0163 | | | [CVE-2021-1801](https://patchblox.com/security/data/cve/CVE-2021-1801.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0152 | | | [CVE-2020-27918](https://patchblox.com/security/data/cve/CVE-2020-27918.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 9.8 | 0.0143 | | | [CVE-2021-1765](https://patchblox.com/security/data/cve/CVE-2021-1765.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0141 | | | [CVE-2021-30720](https://patchblox.com/security/data/cve/CVE-2021-30720.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0137 | | | [CVE-2021-21775](https://patchblox.com/security/data/cve/CVE-2021-21775.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0127 | | | [CVE-2021-30744](https://patchblox.com/security/data/cve/CVE-2021-30744.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0116 | | | [CVE-2021-30689](https://patchblox.com/security/data/cve/CVE-2021-30689.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0110 | | | [CVE-2020-36241](https://patchblox.com/security/data/cve/CVE-2020-36241.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0065 | | | [CVE-2021-28650](https://patchblox.com/security/data/cve/CVE-2021-28650.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0053 | | | [CVE-2020-29623](https://patchblox.com/security/data/cve/CVE-2020-29623.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0036 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo