Linux · Security advisory · November 18, 2021

ELSA-2021-4591: Security update for 3 packages

ELSA-2021-4591, released November 18, 2021, fixes 1 CVE across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.1288

96th percentile

Fixed package versions

Product	Release	Fixed in
gcc-toolset-11-annobin-annocheck	ol 8	0:9.85-1.el8_5.1
gcc-toolset-11-annobin-docs	ol 8	0:9.85-1.el8_5.1
gcc-toolset-11-annobin-plugin-gcc	ol 8	0:9.85-1.el8_5.1

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2021-42574	clang-libs: LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the...		8.5	0.1288	None reported

Also fixes CVE-2021-42574

ALAS2023-2023-030
cpp, cpp-debuginfo, gcc and 52 more on amzn 2023
ELSA-2021-4585
gcc-toolset-10-gcc, gcc-toolset-10-gcc-c++, gcc-toolset-10-gcc-gdb-plugin and 12 more on ol 8
ELSA-2021-4743
clang, clang-analyzer, clang-devel and 25 more on ol 8
ALSA-2021:4743
clang, clang-analyzer, clang-devel and 25 more on almalinux 8
RLSA-2021:4743
clang, compiler-rt, libomp and 5 more on rocky 8
ELSA-2021-4586
gcc-toolset-11-gcc, gcc-toolset-11-gcc-c++, gcc-toolset-11-gcc-gdb-plugin and 14 more on ol 8
ELSA-2021-4587
cpp, gcc, gcc-c++ and 22 more on ol 8
ELSA-2021-4590
cargo, cargo-doc, clippy and 12 more on ol 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2021-4591.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo