Linux · Security advisory · November 9, 2021

RLSA-2021:4451: Security update for 2 packages

RLSA-2021:4451, released November 9, 2021, fixes 3 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0368
89th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
gnutlsrocky 80:3.6.16-4.el8
nettlerocky 80:3.4.1-7.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-20231 gnutls: The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorit... 9.8 0.0368 None reported
High CVE-2021-20232 gnutls: The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorit... 9.8 0.0338 None reported
High CVE-2021-3580 gnutls: The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorit... 7.5 0.0271 None reported
Showing 1 to 3 of 3 1