# RHSA-2021:4381: Security update for 7 packages

RHSA-2021:4381, released November 9, 2021, fixes 29 CVEs across 7 products. 5 of them are being exploited (CVE-2021-1789); 5 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2021-4381
- Platform: Linux
- Released: Nov 9, 2021
- Priority: Patch now (Closes CVE-2021-1789, exploited (CISA KEV))
- CVEs: 29, exploited: 5, on CISA KEV: 5
- Vendor advisory: https://access.redhat.com/errata/RHSA-2021:4381

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [LibRaw](https://patchblox.com/security/data/product/linux/libraw-libraw.md) | RHEL 8 | 0:0.19.5-3.el8 |
| [LibRaw-devel](https://patchblox.com/security/data/product/linux/libraw-devel.md) | RHEL 8 | 0:0.19.5-3.el8 |
| [gnome-autoar](https://patchblox.com/security/data/product/linux/gnome-autoar.md) | RHEL 8 | 0:0.2.3-2.el8 |
| [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | RHEL 8 | 0:2.32.3-2.el8 |
| [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | RHEL 8 | 0:2.32.3-2.el8 |
| [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | RHEL 8 | 0:2.32.3-2.el8 |
| [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | RHEL 8 | 0:2.32.3-2.el8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2021-1789](https://patchblox.com/security/data/cve/CVE-2021-1789.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.1398 | CISA KEV |
| [CVE-2021-1870](https://patchblox.com/security/data/cve/CVE-2021-1870.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0771 | CISA KEV |
| [CVE-2021-1871](https://patchblox.com/security/data/cve/CVE-2021-1871.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0700 | CISA KEV |
| [CVE-2021-30665](https://patchblox.com/security/data/cve/CVE-2021-30665.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0371 | CISA KEV |
| [CVE-2021-30663](https://patchblox.com/security/data/cve/CVE-2021-30663.md) | Patch now | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0352 | CISA KEV |
| [CVE-2021-21779](https://patchblox.com/security/data/cve/CVE-2021-21779.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0292 |  |
| [CVE-2021-21806](https://patchblox.com/security/data/cve/CVE-2021-21806.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0284 |  |
| [CVE-2021-1844](https://patchblox.com/security/data/cve/CVE-2021-1844.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0238 |  |
| [CVE-2021-30799](https://patchblox.com/security/data/cve/CVE-2021-30799.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0226 |  |
| [CVE-2021-30795](https://patchblox.com/security/data/cve/CVE-2021-30795.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0222 |  |
| [CVE-2021-30734](https://patchblox.com/security/data/cve/CVE-2021-30734.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0202 |  |
| [CVE-2021-30797](https://patchblox.com/security/data/cve/CVE-2021-30797.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0187 |  |
| [CVE-2020-13558](https://patchblox.com/security/data/cve/CVE-2020-13558.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0186 |  |
| [CVE-2021-1799](https://patchblox.com/security/data/cve/CVE-2021-1799.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0176 |  |
| [CVE-2021-30749](https://patchblox.com/security/data/cve/CVE-2021-30749.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0168 |  |
| [CVE-2021-1788](https://patchblox.com/security/data/cve/CVE-2021-1788.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0168 |  |
| [CVE-2021-30682](https://patchblox.com/security/data/cve/CVE-2021-30682.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0167 |  |
| [CVE-2021-30758](https://patchblox.com/security/data/cve/CVE-2021-30758.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0166 |  |
| [CVE-2020-24870](https://patchblox.com/security/data/cve/CVE-2020-24870.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0163 |  |
| [CVE-2021-1801](https://patchblox.com/security/data/cve/CVE-2021-1801.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0152 |  |
| [CVE-2020-27918](https://patchblox.com/security/data/cve/CVE-2020-27918.md) | High | iTunes: A use after free issue was addressed with improved memory management. | 9.8 | 0.0143 |  |
| [CVE-2021-1765](https://patchblox.com/security/data/cve/CVE-2021-1765.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0141 |  |
| [CVE-2021-30720](https://patchblox.com/security/data/cve/CVE-2021-30720.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0137 |  |
| [CVE-2021-21775](https://patchblox.com/security/data/cve/CVE-2021-21775.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0127 |  |
| [CVE-2021-30744](https://patchblox.com/security/data/cve/CVE-2021-30744.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0116 |  |
| [CVE-2021-30689](https://patchblox.com/security/data/cve/CVE-2021-30689.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0110 |  |
| [CVE-2020-36241](https://patchblox.com/security/data/cve/CVE-2020-36241.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0065 |  |
| [CVE-2021-28650](https://patchblox.com/security/data/cve/CVE-2021-28650.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0053 |  |
| [CVE-2020-29623](https://patchblox.com/security/data/cve/CVE-2020-29623.md) | High | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux.  The following packages have been upgraded to a... | 9.8 | 0.0036 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
