Linux · Security advisory · May 18, 2021
RHSA-2021:1586: Security update for 11 packages
RHSA-2021:1586, released May 18, 2021, fixes 12 CVEs across 11 products. One of them is being exploited (CVE-2021-30661); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
12
None rated Critical
Exploited
1
CVE-2021-30661
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0494
92nd percentile
Priority of the 12 CVEs
Patch now 1
Urgent 0
High 9
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| gdm | RHEL 8 | 1:3.28.3-39.el8 |
| glib2 | RHEL 8 | 0:2.56.4-9.el8 |
| glib2-devel | RHEL 8 | 0:2.56.4-9.el8 |
| glib2-doc | RHEL 8 | 0:2.56.4-9.el8 |
| glib2-fam | RHEL 8 | 0:2.56.4-9.el8 |
| glib2-static | RHEL 8 | 0:2.56.4-9.el8 |
| glib2-tests | RHEL 8 | 0:2.56.4-9.el8 |
| webkit2gtk3 | RHEL 8 | 0:2.30.4-1.el8 |
| webkit2gtk3-devel | RHEL 8 | 0:2.30.4-1.el8 |
| webkit2gtk3-jsc | RHEL 8 | 0:2.30.4-1.el8 |
| webkit2gtk3-jsc-devel | RHEL 8 | 0:2.30.4-1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-30661 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0449 | KEVExploited | |
| High | CVE-2020-13584 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0494 | None reported | |
| High | CVE-2020-13543 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0349 | None reported | |
| High | CVE-2019-13012 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 7.5 | 0.0321 | None reported | |
| High | CVE-2020-9951 | iTunes: A use after free issue was addressed with improved memory management. | 8.8 | 0.0233 | None reported | |
| High | CVE-2020-9983 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0220 | None reported | |
| High | CVE-2021-1817 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0194 | None reported | |
| High | CVE-2020-9948 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.8 | 0.0169 | None reported | |
| High | CVE-2021-1825 | iTunes: An input validation issue was addressed with improved input validation. | 8.1 | 0.0136 | None reported | |
| High | CVE-2021-1826 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 8.1 | 0.0114 | None reported | |
| Routine | CVE-2021-1820 | gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 6.5 | 0.0134 | None reported | |
| Routine | CVE-2020-16125 | gdm3: gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup ifgdm3 can't contact the accountservice service... | 6.4 | 0.0111 | None reported |
Showing 1 to 12 of 12
1