Linux · Security advisory · May 18, 2021
RHSA-2021:1804: Security update for 45 packages
RHSA-2021:1804, released May 18, 2021, fixes 9 CVEs across 45 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 7
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| egl-wayland | RHEL 8 | 0:1.1.5-3.el8 |
| libX11 | RHEL 8 | 0:1.6.8-4.el8 |
| libX11-common | RHEL 8 | 0:1.6.8-4.el8 |
| libX11-devel | RHEL 8 | 0:1.6.8-4.el8 |
| libX11-xcb | RHEL 8 | 0:1.6.8-4.el8 |
| libdrm | RHEL 8 | 0:2.4.103-1.el8 |
| libdrm-devel | RHEL 8 | 0:2.4.103-1.el8 |
| libglvnd | RHEL 8 | 1:1.3.2-1.el8 |
| libglvnd-core-devel | RHEL 8 | 1:1.3.2-1.el8 |
| libglvnd-devel | RHEL 8 | 1:1.3.2-1.el8 |
| libglvnd-egl | RHEL 8 | 1:1.3.2-1.el8 |
| libglvnd-gles | RHEL 8 | 1:1.3.2-1.el8 |
| libglvnd-glx | RHEL 8 | 1:1.3.2-1.el8 |
| libglvnd-opengl | RHEL 8 | 1:1.3.2-1.el8 |
| libinput | RHEL 8 | 0:1.16.3-1.el8 |
| libinput-devel | RHEL 8 | 0:1.16.3-1.el8 |
| libinput-utils | RHEL 8 | 0:1.16.3-1.el8 |
| libwacom | RHEL 8 | 0:1.6-2.el8 |
| libwacom-data | RHEL 8 | 0:1.6-2.el8 |
| libwacom-devel | RHEL 8 | 0:1.6-2.el8 |
| mesa-dri-drivers | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-filesystem | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libEGL | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libEGL-devel | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libGL | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libGL-devel | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libOSMesa | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libOSMesa-devel | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libgbm | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libgbm-devel | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libglapi | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-libxatracker | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-vdpau-drivers | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-vulkan-devel | RHEL 8 | 0:20.3.3-2.el8 |
| mesa-vulkan-drivers | RHEL 8 | 0:20.3.3-2.el8 |
| xorg-x11-drivers | RHEL 8 | 0:7.7-30.el8 |
| xorg-x11-server-Xdmx | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xephyr | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xnest | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xorg | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xvfb | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-Xwayland | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-common | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-devel | RHEL 8 | 0:1.20.10-1.el8 |
| xorg-x11-server-source | RHEL 8 | 0:1.20.10-1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2020-14346 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0063 | None reported | |
| High | CVE-2020-14361 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0061 | None reported | |
| High | CVE-2020-14345 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0059 | None reported | |
| High | CVE-2020-14362 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0059 | None reported | |
| High | CVE-2020-14363 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0058 | None reported | |
| High | CVE-2020-14360 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0040 | None reported | |
| High | CVE-2020-25712 | egl-wayland: X.Org is an open-source implementation of the X Window System | 7.8 | 0.0035 | None reported | |
| Routine | CVE-2020-14344 | egl-wayland: X.Org is an open-source implementation of the X Window System | 6.7 | 0.0047 | None reported | |
| Routine | CVE-2020-14347 | egl-wayland: X.Org is an open-source implementation of the X Window System | 5.5 | 0.0039 | None reported |
Showing 1 to 9 of 9
1