Linux · Security advisory · May 25, 2021

ELSA-2021-1846: Security update for 30 packages

ELSA-2021-1846, released May 25, 2021, fixes 1 CVE across 30 products. One of them is being exploited (CVE-2020-11023); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2020-11023
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8489
99th percentile

Fixed package versions

ProductReleaseFixed in
bind-dyndb-ldapol 80:11.6-2.module+el8.4.0+20088+3d202164
custodiaol 80:0.6.0-3.module+el8.3.0+7868+2151076c
ipa-clientol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
ipa-client-commonol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
ipa-client-epnol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
ipa-client-sambaol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
ipa-commonol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
ipa-healthcheckol 80:0.7-3.module+el8.4.0+20088+3d202164
ipa-healthcheck-coreol 80:0.7-3.module+el8.4.0+20089+f3f9be88
ipa-python-compatol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
ipa-selinuxol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
ipa-serverol 80:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
ipa-server-commonol 80:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
ipa-server-dnsol 80:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
ipa-server-trust-adol 80:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
opendnssecol 80:2.1.7-1.module+el8.4.0+20088+3d202164
python3-custodiaol 80:0.6.0-3.module+el8.3.0+7868+2151076c
python3-ipaclientol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
python3-ipalibol 80:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
python3-ipaserverol 80:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
python3-ipatestsol 80:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
python3-jwcryptool 80:0.5.0-1.module+el8.3.0+7867+49938b5b
python3-kdcproxyol 80:0.4-5.module+el8.3.0+7868+2151076c
python3-pyusbol 80:1.0.0-9.module+el8.3.0+7867+49938b5b
python3-qrcodeol 80:5.1-12.module+el8.3.0+7867+49938b5b
python3-qrcode-coreol 80:5.1-12.module+el8.3.0+7867+49938b5b
python3-yubicool 80:1.3.2-9.module+el8.3.0+7867+49938b5b
slapi-nisol 80:0.56.6-2.module+el8.4.0+20174+ae9fc984
softhsmol 80:2.6.0-5.module+el8.4.0+20161+5ecb5b37
softhsm-develol 80:2.6.0-5.module+el8.4.0+20161+5ecb5b37

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2020-11023 apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... 6.1 0.8489 KEVExploited
Showing 1 to 1 of 1 1