Linux · Security advisory · May 18, 2021

RHSA-2021:1702: Security update for 3 packages

RHSA-2021:1702, released May 18, 2021, fixes 1 CVE across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0322

88th percentile

Fixed package versions

Product	Release	Fixed in
brotli	RHEL 8	0:1.0.6-3.el8
brotli-devel	RHEL 8	0:1.0.6-3.el8
python3-brotli	RHEL 8	0:1.0.6-3.el8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2020-8927	Brotli Library Buffer Overflow Vulnerability		7.5	0.0322	More likely

Also fixes CVE-2020-8927

PowerShell Preview 7.3.0.1
PowerShell Preview
ELSA-2022-0827
aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1 and 6 more on ol 8
ELSA-2022-0830
aspnetcore-runtime-5.0, aspnetcore-targeting-pack-5.0, dotnet-apphost-pack-5.0 and 6 more on ol 8
ALSA-2022:0830
aspnetcore-runtime-5.0, aspnetcore-targeting-pack-5.0, dotnet-apphost-pack-5.0 and 6 more on almalinux 8
RLSA-2022:0830
dotnet5.0 on rocky 8
ALSA-2022:0827
aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1 and 6 more on almalinux 8
RLSA-2022:0827
dotnet3.1 on rocky 8
RHSA-2022:0827
aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1 and 6 more on RHEL 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2021:1702

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo