Linux · Security advisory · August 10, 2021

RHSA-2021:3076: Security update for 9 packages

RHSA-2021:3076, released August 10, 2021, fixes 4 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0698
94th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 3 Routine 1

Fixed package versions

ProductReleaseFixed in
delveRHEL 80:1.5.0-2.module+el8.4.0+8864+58b0fcdb
go-toolsetRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8
golangRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8
golang-binRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8
golang-docsRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8
golang-miscRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8
golang-raceRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8
golang-srcRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8
golang-testsRHEL 80:1.15.14-1.module+el8.4.0+11833+614b07b8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-34558 grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB 7.5 0.0698 None reported
High CVE-2021-33196 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0346 None reported
High CVE-2021-27918 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0247 None reported
Routine CVE-2021-31525 delve: Go Toolset provides the Go programming language tools and libraries 5.9 0.0369 None reported
Showing 1 to 4 of 4 1