Linux · Security advisory · November 9, 2021

ALSA-2021:4381: Security update for 57 packages

ALSA-2021:4381, released November 9, 2021, fixes 29 CVEs across 57 products. 5 of them are being exploited (CVE-2021-1789); 5 on CISA KEV. Patch Radar priority: Patch now.

Patch now5 on CISA KEV
CVEs closed
29
None rated Critical
Exploited
5
CVE-2021-1789
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1398
96th percentile

Priority of the 29 CVEs

Patch now 5 Urgent 0 High 24 Routine 0

Fixed package versions

ProductReleaseFixed in
LibRawalmalinux 80.19.5-3.el8
LibRaw-develalmalinux 80.19.5-3.el8
accountsservicealmalinux 80.6.55-2.el8
accountsservice-develalmalinux 80.6.55-2.el8
accountsservice-libsalmalinux 80.6.55-2.el8
gdmalmalinux 81:40.0-15.el8
gnome-autoaralmalinux 80.2.3-2.el8
gnome-calculatoralmalinux 83.28.2-2.el8
gnome-classic-sessionalmalinux 83.32.1-20.el8
gnome-control-centeralmalinux 83.28.2-28.el8
gnome-control-center-filesystemalmalinux 83.28.2-28.el8
gnome-online-accountsalmalinux 83.28.2-3.el8
gnome-online-accounts-develalmalinux 83.28.2-3.el8
gnome-sessionalmalinux 83.28.1-13.el8
gnome-session-kiosk-sessionalmalinux 83.28.1-13.el8
gnome-session-wayland-sessionalmalinux 83.28.1-13.el8
gnome-session-xsessionalmalinux 83.28.1-13.el8
gnome-settings-daemonalmalinux 83.32.0-16.el8.alma
gnome-shellalmalinux 83.32.2-40.el8
gnome-shell-extension-apps-menualmalinux 83.32.1-20.el8
gnome-shell-extension-auto-move-windowsalmalinux 83.32.1-20.el8
gnome-shell-extension-commonalmalinux 83.32.1-20.el8
gnome-shell-extension-dash-to-dockalmalinux 83.32.1-20.el8
gnome-shell-extension-desktop-iconsalmalinux 83.32.1-20.el8
gnome-shell-extension-disable-screenshieldalmalinux 83.32.1-20.el8
gnome-shell-extension-drive-menualmalinux 83.32.1-20.el8
gnome-shell-extension-gesture-inhibitoralmalinux 83.32.1-20.el8
gnome-shell-extension-horizontal-workspacesalmalinux 83.32.1-20.el8
gnome-shell-extension-launch-new-instancealmalinux 83.32.1-20.el8
gnome-shell-extension-native-window-placementalmalinux 83.32.1-20.el8
gnome-shell-extension-no-hot-corneralmalinux 83.32.1-20.el8
gnome-shell-extension-panel-favoritesalmalinux 83.32.1-20.el8
gnome-shell-extension-places-menualmalinux 83.32.1-20.el8
gnome-shell-extension-screenshot-window-sizeralmalinux 83.32.1-20.el8
gnome-shell-extension-systemMonitoralmalinux 83.32.1-20.el8
gnome-shell-extension-top-iconsalmalinux 83.32.1-20.el8
gnome-shell-extension-updates-dialogalmalinux 83.32.1-20.el8
gnome-shell-extension-user-themealmalinux 83.32.1-20.el8
gnome-shell-extension-window-grouperalmalinux 83.32.1-20.el8
gnome-shell-extension-window-listalmalinux 83.32.1-20.el8
gnome-shell-extension-windowsNavigatoralmalinux 83.32.1-20.el8
gnome-shell-extension-workspace-indicatoralmalinux 83.32.1-20.el8
gnome-softwarealmalinux 83.36.1-10.el8
gnome-software-develalmalinux 83.36.1-10.el8
gsettings-desktop-schemasalmalinux 83.32.0-6.el8
gsettings-desktop-schemas-develalmalinux 83.32.0-6.el8
gtk-update-icon-cachealmalinux 83.22.30-8.el8
gtk3almalinux 83.22.30-8.el8
gtk3-develalmalinux 83.22.30-8.el8
gtk3-immodule-ximalmalinux 83.22.30-8.el8
mutteralmalinux 83.32.2-60.el8
mutter-develalmalinux 83.32.2-60.el8
vinoalmalinux 83.22.0-11.el8
webkit2gtk3almalinux 82.32.3-2.el8
webkit2gtk3-develalmalinux 82.32.3-2.el8
webkit2gtk3-jscalmalinux 82.32.3-2.el8
webkit2gtk3-jsc-develalmalinux 82.32.3-2.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2021-1789 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.1398 KEVExploited
Patch now CVE-2021-1870 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0771 KEVExploited
Patch now CVE-2021-1871 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0700 KEVExploited
Patch now CVE-2021-30665 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0371 KEVExploited
Patch now CVE-2021-30663 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0352 KEVExploited
High CVE-2021-21779 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0292 None reported
High CVE-2021-21806 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0284 None reported
High CVE-2021-1844 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0238 None reported
High CVE-2021-30799 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0226 None reported
High CVE-2021-30795 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0222 None reported
High CVE-2021-30734 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0202 None reported
High CVE-2021-30797 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0187 None reported
High CVE-2020-13558 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0186 None reported
High CVE-2021-1799 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0176 None reported
High CVE-2021-30749 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0168 None reported
High CVE-2021-1788 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0168 None reported
High CVE-2021-30682 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0167 None reported
High CVE-2021-30758 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0166 None reported
High CVE-2020-24870 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0163 None reported
High CVE-2021-1801 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0152 None reported
High CVE-2020-27918 iTunes: A use after free issue was addressed with improved memory management. 9.8 0.0143 None reported
High CVE-2021-1765 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0141 None reported
High CVE-2021-30720 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0137 None reported
High CVE-2021-21775 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0127 None reported
High CVE-2021-30744 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0116 None reported
Showing 1 to 25 of 29 1Next