Linux · Security advisory · November 16, 2021
ELSA-2021-4513: Security update for 3 packages
ELSA-2021-4513, released November 16, 2021, fixes 4 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Routine.
Routine
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0059
48th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 0
Routine 4
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libsepol | ol 8 | 0:2.9-3.el8 |
| libsepol-devel | ol 8 | 0:2.9-3.el8 |
| libsepol-static | ol 8 | 0:2.9-3.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2021-36086 | libsepol: The libsepol library provides an API for the manipulation of SELinux binary policies | 3.3 | 0.0059 | None reported | |
| Routine | CVE-2021-36087 | libsepol: The libsepol library provides an API for the manipulation of SELinux binary policies | 3.3 | 0.0048 | None reported | |
| Routine | CVE-2021-36084 | libsepol: The libsepol library provides an API for the manipulation of SELinux binary policies | 3.3 | 0.0046 | None reported | |
| Routine | CVE-2021-36085 | libsepol: The libsepol library provides an API for the manipulation of SELinux binary policies | 3.3 | 0.0045 | None reported |
Showing 1 to 4 of 4
1