Linux · Red Hat · Security advisory · May 18, 2021

RHSA-2021:1846: Security update for 30 packages

RHSA-2021:1846, released May 18, 2021, fixes 1 CVE across 30 products. One of them is being exploited (CVE-2020-11023); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2020-11023
Highest CVSS
6.1
Base score, 0 to 10
Highest EPSS
0.8489
99th percentile

Fixed package versions

ProductReleaseFixed in
bind-dyndb-ldapRHEL 80:11.6-2.module+el8.4.0+9328+4ec4e316
custodiaRHEL 80:0.6.0-3.module+el8.1.0+4098+f286395e
ipa-clientRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-client-commonRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-client-epnRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-client-sambaRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-commonRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-healthcheckRHEL 80:0.7-3.module+el8.4.0+9007+5084bdd8
ipa-healthcheck-coreRHEL 80:0.7-3.module+el8.4.0+9007+5084bdd8
ipa-python-compatRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-selinuxRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-serverRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-server-commonRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-server-dnsRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
ipa-server-trust-adRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
opendnssecRHEL 80:2.1.7-1.module+el8.4.0+9007+5084bdd8
python3-custodiaRHEL 80:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclientRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
python3-ipalibRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
python3-ipaserverRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
python3-ipatestsRHEL 80:4.9.2-3.module+el8.4.0+10412+5ecb5b37
python3-jwcryptoRHEL 80:0.5.0-1.module+el8.1.0+4098+f286395e
python3-kdcproxyRHEL 80:0.4-5.module+el8.2.0+4691+a05b2456
python3-pyusbRHEL 80:1.0.0-9.module+el8.1.0+4098+f286395e
python3-qrcodeRHEL 80:5.1-12.module+el8.1.0+4098+f286395e
python3-qrcode-coreRHEL 80:5.1-12.module+el8.1.0+4098+f286395e
python3-yubicoRHEL 80:1.3.2-9.module+el8.1.0+4098+f286395e
slapi-nisRHEL 80:0.56.6-1.module+el8.4.0+9005+f55ff3e7
softhsmRHEL 80:2.6.0-5.module+el8.4.0+10227+076cd560
softhsm-develRHEL 80:2.6.0-5.module+el8.4.0+10227+076cd560

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2020-11023 apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...6.1 0.8489 KEVExploited
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.