Linux · Security advisory · November 18, 2021
ELSA-2021-4587: Security update for 25 packages
ELSA-2021-4587, released November 18, 2021, fixes 1 CVE across 25 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1288
96th percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| cpp | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| gcc | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| gcc-c++ | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| gcc-gdb-plugin | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| gcc-gfortran | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| gcc-offload-nvptx | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| gcc-plugin-devel | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libasan | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libatomic | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libatomic-static | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libgcc | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libgfortran | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libgomp | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libgomp-offload-nvptx | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libitm | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libitm-devel | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| liblsan | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libquadmath | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libquadmath-devel | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libstdc++ | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libstdc++-devel | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libstdc++-docs | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libstdc++-static | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libtsan | ol 8 | 0:8.5.0-4.0.1.el8_5 |
| libubsan | ol 8 | 0:8.5.0-4.0.1.el8_5 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-42574 | clang-libs: LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the... | 8.5 | 0.1288 | None reported |
Showing 1 to 1 of 1
1