Linux · Security advisory · April 14, 2021

RHSA-2021:1206: Security update for 7 packages

RHSA-2021:1206, released April 14, 2021, fixes 1 CVE across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0174
77th percentile

Fixed package versions

ProductReleaseFixed in
gnutlsRHEL 80:3.6.14-8.el8_3
gnutls-c++RHEL 80:3.6.14-8.el8_3
gnutls-daneRHEL 80:3.6.14-8.el8_3
gnutls-develRHEL 80:3.6.14-8.el8_3
gnutls-utilsRHEL 80:3.6.14-8.el8_3
nettleRHEL 80:3.4.1-4.el8_3
nettle-develRHEL 80:3.4.1-4.el8_3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-20305 libhogweed6t64: A flaw was found in Nettle in versions before 3.7.2, where several Nettlesignature verification functions (GOST DSA,... 8.1 0.0174 None reported
Showing 1 to 1 of 1 1