Linux · Security advisory · May 25, 2021
ELSA-2021-1804: Security update for 45 packages
ELSA-2021-1804, released May 25, 2021, fixes 9 CVEs across 45 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 7
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| egl-wayland | ol 8 | 0:1.1.5-3.el8 |
| libX11 | ol 8 | 0:1.6.8-4.el8 |
| libX11-common | ol 8 | 0:1.6.8-4.el8 |
| libX11-devel | ol 8 | 0:1.6.8-4.el8 |
| libX11-xcb | ol 8 | 0:1.6.8-4.el8 |
| libdrm | ol 8 | 0:2.4.103-1.el8 |
| libdrm-devel | ol 8 | 0:2.4.103-1.el8 |
| libglvnd | ol 8 | 1:1.3.2-1.el8 |
| libglvnd-core-devel | ol 8 | 1:1.3.2-1.el8 |
| libglvnd-devel | ol 8 | 1:1.3.2-1.el8 |
| libglvnd-egl | ol 8 | 1:1.3.2-1.el8 |
| libglvnd-gles | ol 8 | 1:1.3.2-1.el8 |
| libglvnd-glx | ol 8 | 1:1.3.2-1.el8 |
| libglvnd-opengl | ol 8 | 1:1.3.2-1.el8 |
| libinput | ol 8 | 0:1.16.3-1.el8 |
| libinput-devel | ol 8 | 0:1.16.3-1.el8 |
| libinput-utils | ol 8 | 0:1.16.3-1.el8 |
| libwacom | ol 8 | 0:1.6-2.el8 |
| libwacom-data | ol 8 | 0:1.6-2.el8 |
| libwacom-devel | ol 8 | 0:1.6-2.el8 |
| mesa-dri-drivers | ol 8 | 0:20.3.3-2.el8 |
| mesa-filesystem | ol 8 | 0:20.3.3-2.el8 |
| mesa-libEGL | ol 8 | 0:20.3.3-2.el8 |
| mesa-libEGL-devel | ol 8 | 0:20.3.3-2.el8 |
| mesa-libGL | ol 8 | 0:20.3.3-2.el8 |
| mesa-libGL-devel | ol 8 | 0:20.3.3-2.el8 |
| mesa-libOSMesa | ol 8 | 0:20.3.3-2.el8 |
| mesa-libOSMesa-devel | ol 8 | 0:20.3.3-2.el8 |
| mesa-libgbm | ol 8 | 0:20.3.3-2.el8 |
| mesa-libgbm-devel | ol 8 | 0:20.3.3-2.el8 |
| mesa-libglapi | ol 8 | 0:20.3.3-2.el8 |
| mesa-libxatracker | ol 8 | 0:20.3.3-2.el8 |
| mesa-vdpau-drivers | ol 8 | 0:20.3.3-2.el8 |
| mesa-vulkan-devel | ol 8 | 0:20.3.3-2.el8 |
| mesa-vulkan-drivers | ol 8 | 0:20.3.3-2.el8 |
| xorg-x11-drivers | ol 8 | 0:7.7-30.el8 |
| xorg-x11-server-Xdmx | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xephyr | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xnest | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xorg | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xvfb | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xwayland | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-common | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-devel | ol 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-source | ol 8 | 0:1.20.10-1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2020-14346 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0063 | None reported | |
| High | CVE-2020-14361 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0061 | None reported | |
| High | CVE-2020-14345 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0059 | None reported | |
| High | CVE-2020-14362 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0059 | None reported | |
| High | CVE-2020-14363 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0058 | None reported | |
| High | CVE-2020-14360 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0040 | None reported | |
| High | CVE-2020-25712 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0035 | None reported | |
| Routine | CVE-2020-14344 | egl-wayland: X.Org is an open-source implementation of the X Window System | 6.7 | 0.0047 | None reported | |
| Routine | CVE-2020-14347 | egl-wayland: X.Org is an open-source implementation of the X Window System | 5.5 | 0.0039 | None reported |
Showing 1 to 9 of 9
1