{
  "fix": "RHSA-2021:4381",
  "url": "https://patchblox.com/security/fix/linux/rhsa-2021-4381",
  "summary": "RHSA-2021:4381, released November 9, 2021, fixes 29 CVEs across 7 products. 5 of them are being exploited (CVE-2021-1789); 5 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2021-11-09T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2021-1789, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 29,
  "exploitedCveCount": 5,
  "kevCveCount": 5,
  "ransomwareCveCount": 0,
  "maxEpss": 0.13975,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://access.redhat.com/errata/RHSA-2021:4381",
  "appliesTo": [
    {
      "product": "LibRaw",
      "productUrl": "https://patchblox.com/security/product/linux/libraw-libraw",
      "release": "RHEL 8",
      "fixedVersion": "0:0.19.5-3.el8",
      "supported": true
    },
    {
      "product": "LibRaw-devel",
      "productUrl": "https://patchblox.com/security/product/linux/libraw-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:0.19.5-3.el8",
      "supported": true
    },
    {
      "product": "gnome-autoar",
      "productUrl": "https://patchblox.com/security/product/linux/gnome-autoar",
      "release": "RHEL 8",
      "fixedVersion": "0:0.2.3-2.el8",
      "supported": true
    },
    {
      "product": "webkit2gtk3",
      "productUrl": "https://patchblox.com/security/product/linux/webkit2gtk3",
      "release": "RHEL 8",
      "fixedVersion": "0:2.32.3-2.el8",
      "supported": true
    },
    {
      "product": "webkit2gtk3-devel",
      "productUrl": "https://patchblox.com/security/product/linux/webkit2gtk3-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.32.3-2.el8",
      "supported": true
    },
    {
      "product": "webkit2gtk3-jsc",
      "productUrl": "https://patchblox.com/security/product/linux/webkit2gtk3-jsc",
      "release": "RHEL 8",
      "fixedVersion": "0:2.32.3-2.el8",
      "supported": true
    },
    {
      "product": "webkit2gtk3-jsc-devel",
      "productUrl": "https://patchblox.com/security/product/linux/webkit2gtk3-jsc-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.32.3-2.el8",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2021-1789",
      "url": "https://patchblox.com/security/cve/CVE-2021-1789",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.13975,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-1870",
      "url": "https://patchblox.com/security/cve/CVE-2021-1870",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0771,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-1871",
      "url": "https://patchblox.com/security/cve/CVE-2021-1871",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.07002,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30665",
      "url": "https://patchblox.com/security/cve/CVE-2021-30665",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.03706,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30663",
      "url": "https://patchblox.com/security/cve/CVE-2021-30663",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.03521,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21779",
      "url": "https://patchblox.com/security/cve/CVE-2021-21779",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.02924,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21806",
      "url": "https://patchblox.com/security/cve/CVE-2021-21806",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.02835,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-1844",
      "url": "https://patchblox.com/security/cve/CVE-2021-1844",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.02377,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30799",
      "url": "https://patchblox.com/security/cve/CVE-2021-30799",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.02263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30795",
      "url": "https://patchblox.com/security/cve/CVE-2021-30795",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.02217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30734",
      "url": "https://patchblox.com/security/cve/CVE-2021-30734",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.02023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30797",
      "url": "https://patchblox.com/security/cve/CVE-2021-30797",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01867,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-13558",
      "url": "https://patchblox.com/security/cve/CVE-2020-13558",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01857,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-1799",
      "url": "https://patchblox.com/security/cve/CVE-2021-1799",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01763,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30749",
      "url": "https://patchblox.com/security/cve/CVE-2021-30749",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01677,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-1788",
      "url": "https://patchblox.com/security/cve/CVE-2021-1788",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01676,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30682",
      "url": "https://patchblox.com/security/cve/CVE-2021-30682",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01666,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30758",
      "url": "https://patchblox.com/security/cve/CVE-2021-30758",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01658,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-24870",
      "url": "https://patchblox.com/security/cve/CVE-2020-24870",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01625,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-1801",
      "url": "https://patchblox.com/security/cve/CVE-2021-1801",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01515,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-27918",
      "url": "https://patchblox.com/security/cve/CVE-2020-27918",
      "title": "iTunes: A use after free issue was addressed with improved memory management.",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01425,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-1765",
      "url": "https://patchblox.com/security/cve/CVE-2021-1765",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30720",
      "url": "https://patchblox.com/security/cve/CVE-2021-30720",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21775",
      "url": "https://patchblox.com/security/cve/CVE-2021-21775",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30744",
      "url": "https://patchblox.com/security/cve/CVE-2021-30744",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.01155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30689",
      "url": "https://patchblox.com/security/cve/CVE-2021-30689",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.011,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-36241",
      "url": "https://patchblox.com/security/cve/CVE-2020-36241",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00646,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-28650",
      "url": "https://patchblox.com/security/cve/CVE-2021-28650",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-29623",
      "url": "https://patchblox.com/security/cve/CVE-2020-29623",
      "title": "gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.\n\nThe following packages have been upgraded to a...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0036,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}