Linux · Security advisory · November 9, 2021

RLSA-2021:4381: Security update for 17 packages

RLSA-2021:4381, released November 9, 2021, fixes 29 CVEs across 17 products. 5 of them are being exploited (CVE-2021-1789); 5 on CISA KEV. Patch Radar priority: Patch now.

Patch now5 on CISA KEV
CVEs closed
29
None rated Critical
Exploited
5
CVE-2021-1789
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1398
96th percentile

Priority of the 29 CVEs

Patch now 5 Urgent 0 High 24 Routine 0

Fixed package versions

ProductReleaseFixed in
LibRawrocky 80:0.19.5-3.el8
accountsservicerocky 80:0.6.55-2.el8
gdmrocky 81:40.0-15.el8
gnome-autoarrocky 80:0.2.3-2.el8
gnome-calculatorrocky 80:3.28.2-2.el8
gnome-control-centerrocky 80:3.28.2-28.el8
gnome-online-accountsrocky 80:3.28.2-3.el8
gnome-sessionrocky 80:3.28.1-13.el8
gnome-settings-daemonrocky 80:3.32.0-16.el8
gnome-shellrocky 80:3.32.2-40.el8
gnome-shell-extensionsrocky 80:3.32.1-20.el8
gnome-softwarerocky 80:3.36.1-10.el8
gsettings-desktop-schemasrocky 80:3.32.0-6.el8
gtk3rocky 80:3.22.30-8.el8
mutterrocky 80:3.32.2-60.el8
vinorocky 80:3.22.0-11.el8
webkit2gtk3rocky 80:2.32.3-2.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2021-1789 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.1398 KEVExploited
Patch now CVE-2021-1870 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0771 KEVExploited
Patch now CVE-2021-1871 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0700 KEVExploited
Patch now CVE-2021-30665 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0371 KEVExploited
Patch now CVE-2021-30663 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0352 KEVExploited
High CVE-2021-21779 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0292 None reported
High CVE-2021-21806 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0284 None reported
High CVE-2021-1844 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0238 None reported
High CVE-2021-30799 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0226 None reported
High CVE-2021-30795 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0222 None reported
High CVE-2021-30734 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0202 None reported
High CVE-2021-30797 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0187 None reported
High CVE-2020-13558 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0186 None reported
High CVE-2021-1799 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0176 None reported
High CVE-2021-30749 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0168 None reported
High CVE-2021-1788 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0168 None reported
High CVE-2021-30682 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0167 None reported
High CVE-2021-30758 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0166 None reported
High CVE-2020-24870 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0163 None reported
High CVE-2021-1801 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0152 None reported
High CVE-2020-27918 iTunes: A use after free issue was addressed with improved memory management. 9.8 0.0143 None reported
High CVE-2021-1765 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0141 None reported
High CVE-2021-30720 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0137 None reported
High CVE-2021-21775 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0127 None reported
High CVE-2021-30744 gnome-autoar: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a... 9.8 0.0116 None reported
Showing 1 to 25 of 29 1Next