Linux · Security advisory · November 18, 2021

ALSA-2021:4743: Security update for 28 packages

ALSA-2021:4743, released November 18, 2021, fixes 1 CVE across 28 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.1288

96th percentile

Fixed package versions

Product	Release	Fixed in
clang	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
clang-analyzer	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
clang-devel	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
clang-libs	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
clang-resource-filesystem	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
clang-tools-extra	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
compiler-rt	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
git-clang-format	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
libomp	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
libomp-devel	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
libomp-test	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
lld	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
lld-devel	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
lld-libs	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
lld-test	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
lldb	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
lldb-devel	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
llvm	almalinux 8	12.0.1-2.module_el8.4.0+2600+cefb5d4c
llvm-devel	almalinux 8	12.0.1-2.module_el8.4.0+2600+cefb5d4c
llvm-doc	almalinux 8	12.0.1-2.module_el8.4.0+2600+cefb5d4c
llvm-googletest	almalinux 8	12.0.1-2.module_el8.4.0+2600+cefb5d4c
llvm-libs	almalinux 8	12.0.1-2.module_el8.4.0+2600+cefb5d4c
llvm-static	almalinux 8	12.0.1-2.module_el8.4.0+2600+cefb5d4c
llvm-test	almalinux 8	12.0.1-2.module_el8.4.0+2600+cefb5d4c
llvm-toolset	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
python3-clang	almalinux 8	12.0.1-4.module_el8.4.0+2600+cefb5d4c
python3-lit	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c
python3-lldb	almalinux 8	12.0.1-1.module_el8.4.0+2600+cefb5d4c

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2021-42574	clang-libs: LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the...		8.5	0.1288	None reported

Also fixes CVE-2021-42574

ALAS2023-2023-030
cpp, cpp-debuginfo, gcc and 52 more on amzn 2023
ELSA-2021-4585
gcc-toolset-10-gcc, gcc-toolset-10-gcc-c++, gcc-toolset-10-gcc-gdb-plugin and 12 more on ol 8
ELSA-2021-4743
clang, clang-analyzer, clang-devel and 25 more on ol 8
RLSA-2021:4743
clang, compiler-rt, libomp and 5 more on rocky 8
ELSA-2021-4586
gcc-toolset-11-gcc, gcc-toolset-11-gcc-c++, gcc-toolset-11-gcc-gdb-plugin and 14 more on ol 8
ELSA-2021-4587
cpp, gcc, gcc-c++ and 22 more on ol 8
ELSA-2021-4590
cargo, cargo-doc, clippy and 12 more on ol 8
ELSA-2021-4591
gcc-toolset-11-annobin-annocheck, gcc-toolset-11-annobin-docs, gcc-toolset-11-annobin-plugin-gcc on ol 8

Vendor advisory

https://osv.dev/vulnerability/ALSA-2021:4743

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo