Linux · Security advisory · November 16, 2021

ELSA-2021-4381: Security update for 57 packages

ELSA-2021-4381, released November 16, 2021, fixes 29 CVEs across 57 products. 5 of them are being exploited (CVE-2021-1789); 5 on CISA KEV. Patch Radar priority: Patch now.

Patch now5 on CISA KEV
CVEs closed
29
None rated Critical
Exploited
5
CVE-2021-1789
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1398
96th percentile

Priority of the 29 CVEs

Patch now 5 Urgent 0 High 24 Routine 0

Fixed package versions

ProductReleaseFixed in
LibRawol 80:0.19.5-3.el8
LibRaw-develol 80:0.19.5-3.el8
accountsserviceol 80:0.6.55-2.el8
accountsservice-develol 80:0.6.55-2.el8
accountsservice-libsol 80:0.6.55-2.el8
gdmol 81:40.0-15.el8
gnome-autoarol 80:0.2.3-2.el8
gnome-calculatorol 80:3.28.2-2.el8
gnome-classic-sessionol 80:3.32.1-20.el8
gnome-control-centerol 80:3.28.2-28.el8
gnome-control-center-filesystemol 80:3.28.2-28.el8
gnome-online-accountsol 80:3.28.2-3.el8
gnome-online-accounts-develol 80:3.28.2-3.el8
gnome-sessionol 80:3.28.1-13.0.1.el8
gnome-session-kiosk-sessionol 80:3.28.1-13.0.1.el8
gnome-session-wayland-sessionol 80:3.28.1-13.0.1.el8
gnome-session-xsessionol 80:3.28.1-13.0.1.el8
gnome-settings-daemonol 80:3.32.0-16.el8
gnome-shellol 80:3.32.2-40.el8
gnome-shell-extension-apps-menuol 80:3.32.1-20.el8
gnome-shell-extension-auto-move-windowsol 80:3.32.1-20.el8
gnome-shell-extension-commonol 80:3.32.1-20.el8
gnome-shell-extension-dash-to-dockol 80:3.32.1-20.el8
gnome-shell-extension-desktop-iconsol 80:3.32.1-20.el8
gnome-shell-extension-disable-screenshieldol 80:3.32.1-20.el8
gnome-shell-extension-drive-menuol 80:3.32.1-20.el8
gnome-shell-extension-gesture-inhibitorol 80:3.32.1-20.el8
gnome-shell-extension-horizontal-workspacesol 80:3.32.1-20.el8
gnome-shell-extension-launch-new-instanceol 80:3.32.1-20.el8
gnome-shell-extension-native-window-placementol 80:3.32.1-20.el8
gnome-shell-extension-no-hot-cornerol 80:3.32.1-20.el8
gnome-shell-extension-panel-favoritesol 80:3.32.1-20.el8
gnome-shell-extension-places-menuol 80:3.32.1-20.el8
gnome-shell-extension-screenshot-window-sizerol 80:3.32.1-20.el8
gnome-shell-extension-systemMonitorol 80:3.32.1-20.el8
gnome-shell-extension-top-iconsol 80:3.32.1-20.el8
gnome-shell-extension-updates-dialogol 80:3.32.1-20.el8
gnome-shell-extension-user-themeol 80:3.32.1-20.el8
gnome-shell-extension-window-grouperol 80:3.32.1-20.el8
gnome-shell-extension-window-listol 80:3.32.1-20.el8
gnome-shell-extension-windowsNavigatorol 80:3.32.1-20.el8
gnome-shell-extension-workspace-indicatorol 80:3.32.1-20.el8
gnome-softwareol 80:3.36.1-10.el8
gnome-software-develol 80:3.36.1-10.el8
gsettings-desktop-schemasol 80:3.32.0-6.el8
gsettings-desktop-schemas-develol 80:3.32.0-6.el8
gtk-update-icon-cacheol 80:3.22.30-8.el8
gtk3ol 80:3.22.30-8.el8
gtk3-develol 80:3.22.30-8.el8
gtk3-immodule-ximol 80:3.22.30-8.el8
mutterol 80:3.32.2-60.el8
mutter-develol 80:3.32.2-60.el8
vinool 80:3.22.0-11.el8
webkit2gtk3ol 80:2.32.3-2.el8
webkit2gtk3-develol 80:2.32.3-2.el8
webkit2gtk3-jscol 80:2.32.3-2.el8
webkit2gtk3-jsc-develol 80:2.32.3-2.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2021-1789 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.1398 KEVExploited
Patch now CVE-2021-1870 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0771 KEVExploited
Patch now CVE-2021-1871 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0700 KEVExploited
Patch now CVE-2021-30665 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0371 KEVExploited
Patch now CVE-2021-30663 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0352 KEVExploited
High CVE-2021-21779 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0292 None reported
High CVE-2021-21806 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0284 None reported
High CVE-2021-1844 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0238 None reported
High CVE-2021-30799 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0226 None reported
High CVE-2021-30795 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0222 None reported
High CVE-2021-30734 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0202 None reported
High CVE-2021-30797 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0187 None reported
High CVE-2020-13558 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0186 None reported
High CVE-2021-1799 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0176 None reported
High CVE-2021-30749 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0168 None reported
High CVE-2021-1788 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0168 None reported
High CVE-2021-30682 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0167 None reported
High CVE-2021-30758 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0166 None reported
High CVE-2020-24870 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0163 None reported
High CVE-2021-1801 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0152 None reported
High CVE-2020-27918 iTunes: A use after free issue was addressed with improved memory management. 9.8 0.0143 None reported
High CVE-2021-1765 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0141 None reported
High CVE-2021-30720 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0137 None reported
High CVE-2021-21775 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0127 None reported
High CVE-2021-30744 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0116 None reported
Showing 1 to 25 of 29 1Next