Linux · Security advisory · November 9, 2021

ALSA-2021:4156: delve security update

ALSA-2021:4156, released November 9, 2021, fixes 4 CVEs in delve (version 1.6.0-1.module_el8.5.0+2604+960c7771). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0337
88th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
delvealmalinux 81.6.0-1.module_el8.5.0+2604+960c7771

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-33198 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0337 None reported
High CVE-2021-33195 grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB 7.5 0.0320 None reported
High CVE-2021-36221 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0311 None reported
High CVE-2021-33197 grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB 7.5 0.0226 None reported
Showing 1 to 4 of 4 1