Linux · Security advisory · May 25, 2021

ELSA-2021-1586: Security update for 123 packages

ELSA-2021-1586, released May 25, 2021, fixes 6 CVEs across 123 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0494
92nd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
OpenEXR-develol 80:2.2.0-12.el8
OpenEXR-libsol 80:2.2.0-12.el8
accountsserviceol 80:0.6.55-1.el8
accountsservice-develol 80:0.6.55-1.el8
accountsservice-libsol 80:0.6.55-1.el8
atkmmol 80:2.24.2-7.el8
atkmm-develol 80:2.24.2-7.el8
atkmm-docol 80:2.24.2-7.el8
cairommol 80:1.12.0-8.el8
cairomm-develol 80:1.12.0-8.el8
cairomm-docol 80:1.12.0-8.el8
chrome-gnome-shellol 80:10.1-7.el8
dleyna-coreol 80:0.6.0-3.el8
dleyna-serverol 80:0.6.0-3.el8
enchant2ol 80:2.2.3-3.el8
enchant2-develol 80:2.2.3-3.el8
gaminol 80:0.1.10-32.el8
gamin-develol 80:0.1.10-32.el8
gdmol 81:3.28.3-39.el8
geoclue2ol 80:2.5.5-2.el8
geoclue2-demosol 80:2.5.5-2.el8
geoclue2-develol 80:2.5.5-2.el8
geoclue2-libsol 80:2.5.5-2.el8
geocode-glibol 80:3.26.0-3.el8
geocode-glib-develol 80:3.26.0-3.el8
gjsol 80:1.56.2-5.el8
gjs-develol 80:1.56.2-5.el8
glib2ol 80:2.56.4-9.el8
glib2-develol 80:2.56.4-9.el8
glib2-docol 80:2.56.4-9.el8
glib2-famol 80:2.56.4-9.el8
glib2-staticol 80:2.56.4-9.el8
glib2-testsol 80:2.56.4-9.el8
glibmm24ol 80:2.56.0-2.el8
glibmm24-develol 80:2.56.0-2.el8
glibmm24-docol 80:2.56.0-2.el8
gnome-boxesol 80:3.36.5-8.0.1.el8
gnome-classic-sessionol 80:3.32.1-14.el8
gnome-control-centerol 80:3.28.2-27.el8
gnome-control-center-filesystemol 80:3.28.2-27.el8
gnome-online-accountsol 80:3.28.2-2.el8
gnome-online-accounts-develol 80:3.28.2-2.el8
gnome-photosol 80:3.28.1-4.el8
gnome-photos-testsol 80:3.28.1-4.el8
gnome-settings-daemonol 80:3.32.0-14.el8
gnome-shellol 80:3.32.2-30.el8
gnome-shell-extension-apps-menuol 80:3.32.1-14.el8
gnome-shell-extension-auto-move-windowsol 80:3.32.1-14.el8
gnome-shell-extension-commonol 80:3.32.1-14.el8
gnome-shell-extension-dash-to-dockol 80:3.32.1-14.el8
gnome-shell-extension-desktop-iconsol 80:3.32.1-14.el8
gnome-shell-extension-disable-screenshieldol 80:3.32.1-14.el8
gnome-shell-extension-drive-menuol 80:3.32.1-14.el8
gnome-shell-extension-horizontal-workspacesol 80:3.32.1-14.el8
gnome-shell-extension-launch-new-instanceol 80:3.32.1-14.el8
gnome-shell-extension-native-window-placementol 80:3.32.1-14.el8
gnome-shell-extension-no-hot-cornerol 80:3.32.1-14.el8
gnome-shell-extension-panel-favoritesol 80:3.32.1-14.el8
gnome-shell-extension-places-menuol 80:3.32.1-14.el8
gnome-shell-extension-screenshot-window-sizerol 80:3.32.1-14.el8
gnome-shell-extension-systemMonitorol 80:3.32.1-14.el8
gnome-shell-extension-top-iconsol 80:3.32.1-14.el8
gnome-shell-extension-updates-dialogol 80:3.32.1-14.el8
gnome-shell-extension-user-themeol 80:3.32.1-14.el8
gnome-shell-extension-window-grouperol 80:3.32.1-14.el8
gnome-shell-extension-window-listol 80:3.32.1-14.el8
gnome-shell-extension-windowsNavigatorol 80:3.32.1-14.el8
gnome-shell-extension-workspace-indicatorol 80:3.32.1-14.el8
gnome-softwareol 80:3.36.1-5.el8
gnome-terminalol 80:3.28.3-3.el8
gnome-terminal-nautilusol 80:3.28.3-3.el8
gtk-docol 80:1.28-3.el8
gtk2ol 80:2.24.32-5.el8
gtk2-develol 80:2.24.32-5.el8
gtk2-devel-docsol 80:2.24.32-5.el8
gtk2-immodule-ximol 80:2.24.32-5.el8
gtk2-immodulesol 80:2.24.32-5.el8
gtkmm24ol 80:2.24.5-6.el8
gtkmm24-develol 80:2.24.5-6.el8
gtkmm24-docsol 80:2.24.5-6.el8
gtkmm30ol 80:3.22.2-3.el8
gtkmm30-develol 80:3.22.2-3.el8
gtkmm30-docol 80:3.22.2-3.el8
gvfsol 80:1.36.2-11.el8
gvfs-afcol 80:1.36.2-11.el8
gvfs-afpol 80:1.36.2-11.el8
gvfs-archiveol 80:1.36.2-11.el8
gvfs-clientol 80:1.36.2-11.el8
gvfs-develol 80:1.36.2-11.el8
gvfs-fuseol 80:1.36.2-11.el8
gvfs-goaol 80:1.36.2-11.el8
gvfs-gphoto2ol 80:1.36.2-11.el8
gvfs-mtpol 80:1.36.2-11.el8
gvfs-smbol 80:1.36.2-11.el8
libdazzleol 80:3.28.5-2.el8
libdazzle-develol 80:3.28.5-2.el8
libepubgenol 80:0.1.0-3.el8
libepubgen-develol 80:0.1.0-3.el8
libsassol 80:3.4.5-6.el8
libsass-develol 80:3.4.5-6.el8
libsigc++20ol 80:2.10.0-6.el8
libsigc++20-develol 80:2.10.0-6.el8
libsigc++20-docol 80:2.10.0-6.el8
libvisualol 81:0.4.0-25.el8
libvisual-develol 81:0.4.0-25.el8
mutterol 80:3.32.2-57.el8
mutter-develol 80:3.32.2-57.el8
nautilusol 80:3.28.1-15.el8
nautilus-develol 80:3.28.1-15.el8
nautilus-extensionsol 80:3.28.1-15.el8
pangommol 80:2.40.1-6.el8
pangomm-develol 80:2.40.1-6.el8
pangomm-docol 80:2.40.1-6.el8
soundtouchol 80:2.0.0-3.el8
soundtouch-develol 80:2.0.0-3.el8
valaol 80:0.40.19-2.el8
vala-develol 80:0.40.19-2.el8
webkit2gtk3ol 80:2.30.4-1.el8
webkit2gtk3-develol 80:2.30.4-1.el8
webkit2gtk3-jscol 80:2.30.4-1.el8
webkit2gtk3-jsc-develol 80:2.30.4-1.el8
woff2ol 80:1.0.2-5.el8
woff2-develol 80:1.0.2-5.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-13584 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 8.8 0.0494 None reported
High CVE-2020-13543 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 8.8 0.0349 None reported
High CVE-2019-13012 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 7.5 0.0321 None reported
High CVE-2020-9951 iTunes: A use after free issue was addressed with improved memory management. 8.8 0.0233 None reported
High CVE-2020-9983 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 8.8 0.0220 None reported
High CVE-2020-9948 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 8.8 0.0169 None reported
Showing 1 to 6 of 6 1