Linux · Security advisory · November 16, 2021

ELSA-2021-4364: Security update for 2 packages

ELSA-2021-4364, released November 16, 2021, fixes 4 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0129
70th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 0 Routine 4

Fixed package versions

ProductReleaseFixed in
binutilsol 80:2.30-108.0.2.el8
binutils-develol 80:2.30-108.0.2.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2021-20284 binutils: The binutils packages provide a collection of binary utilities for the manipulation of object code in various object... 6.5 0.0129 None reported
Routine CVE-2020-35448 binutils: The binutils packages provide a collection of binary utilities for the manipulation of object code in various object... 6.5 0.0124 None reported
Routine CVE-2021-20197 binutils: The binutils packages provide a collection of binary utilities for the manipulation of object code in various object... 6.5 0.0030 None reported
Routine CVE-2021-3487 binutils: The binutils packages provide a collection of binary utilities for the manipulation of object code in various object... 6.5 n/a None reported
Showing 1 to 4 of 4 1