Linux · Security advisory · November 9, 2021
RHSA-2021:4381: Security update for 7 packages
RHSA-2021:4381, released November 9, 2021, fixes 29 CVEs across 7 products. 5 of them are being exploited (CVE-2021-1789); 5 on CISA KEV. Patch Radar priority: Patch now.
Patch now5 on CISA KEV
CVEs closed
29
None rated Critical
Exploited
5
CVE-2021-1789
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1398
96th percentile
Priority of the 29 CVEs
Patch now 5
Urgent 0
High 24
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| LibRaw | RHEL 8 | 0:0.19.5-3.el8 |
| LibRaw-devel | RHEL 8 | 0:0.19.5-3.el8 |
| gnome-autoar | RHEL 8 | 0:0.2.3-2.el8 |
| webkit2gtk3 | RHEL 8 | 0:2.32.3-2.el8 |
| webkit2gtk3-devel | RHEL 8 | 0:2.32.3-2.el8 |
| webkit2gtk3-jsc | RHEL 8 | 0:2.32.3-2.el8 |
| webkit2gtk3-jsc-devel | RHEL 8 | 0:2.32.3-2.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-1789 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.1398 | KEVExploited | |
| Patch now | CVE-2021-1870 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0771 | KEVExploited | |
| Patch now | CVE-2021-1871 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0700 | KEVExploited | |
| Patch now | CVE-2021-30665 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0371 | KEVExploited | |
| Patch now | CVE-2021-30663 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0352 | KEVExploited | |
| High | CVE-2021-21779 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0292 | None reported | |
| High | CVE-2021-21806 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0284 | None reported | |
| High | CVE-2021-1844 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0238 | None reported | |
| High | CVE-2021-30799 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0226 | None reported | |
| High | CVE-2021-30795 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0222 | None reported | |
| High | CVE-2021-30734 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0202 | None reported | |
| High | CVE-2021-30797 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0187 | None reported | |
| High | CVE-2020-13558 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0186 | None reported | |
| High | CVE-2021-1799 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0176 | None reported | |
| High | CVE-2021-30749 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0168 | None reported | |
| High | CVE-2021-1788 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0168 | None reported | |
| High | CVE-2021-30682 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0167 | None reported | |
| High | CVE-2021-30758 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0166 | None reported | |
| High | CVE-2020-24870 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0163 | None reported | |
| High | CVE-2021-1801 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0152 | None reported | |
| High | CVE-2020-27918 | iTunes: A use after free issue was addressed with improved memory management. | 9.8 | 0.0143 | None reported | |
| High | CVE-2021-1765 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0141 | None reported | |
| High | CVE-2021-30720 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0137 | None reported | |
| High | CVE-2021-21775 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0127 | None reported | |
| High | CVE-2021-30744 | gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... | 9.8 | 0.0116 | None reported |
Showing 1 to 25 of 29
1Next