Linux · Oracle Linux · Security advisory · May 25, 2021

ELSA-2021-1586: Security update for 123 packages

ELSA-2021-1586, released May 25, 2021, fixes 6 CVEs across 123 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0494
92nd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
OpenEXR-develol 80:2.2.0-12.el8
OpenEXR-libsol 80:2.2.0-12.el8
accountsserviceol 80:0.6.55-1.el8
accountsservice-develol 80:0.6.55-1.el8
accountsservice-libsol 80:0.6.55-1.el8
atkmmol 80:2.24.2-7.el8
atkmm-develol 80:2.24.2-7.el8
atkmm-docol 80:2.24.2-7.el8
cairommol 80:1.12.0-8.el8
cairomm-develol 80:1.12.0-8.el8
cairomm-docol 80:1.12.0-8.el8
chrome-gnome-shellol 80:10.1-7.el8
dleyna-coreol 80:0.6.0-3.el8
dleyna-serverol 80:0.6.0-3.el8
enchant2ol 80:2.2.3-3.el8
enchant2-develol 80:2.2.3-3.el8
gaminol 80:0.1.10-32.el8
gamin-develol 80:0.1.10-32.el8
gdmol 81:3.28.3-39.el8
geoclue2ol 80:2.5.5-2.el8
geoclue2-demosol 80:2.5.5-2.el8
geoclue2-develol 80:2.5.5-2.el8
geoclue2-libsol 80:2.5.5-2.el8
geocode-glibol 80:3.26.0-3.el8
geocode-glib-develol 80:3.26.0-3.el8
gjsol 80:1.56.2-5.el8
gjs-develol 80:1.56.2-5.el8
glib2ol 80:2.56.4-9.el8
glib2-develol 80:2.56.4-9.el8
glib2-docol 80:2.56.4-9.el8
glib2-famol 80:2.56.4-9.el8
glib2-staticol 80:2.56.4-9.el8
glib2-testsol 80:2.56.4-9.el8
glibmm24ol 80:2.56.0-2.el8
glibmm24-develol 80:2.56.0-2.el8
glibmm24-docol 80:2.56.0-2.el8
gnome-boxesol 80:3.36.5-8.0.1.el8
gnome-classic-sessionol 80:3.32.1-14.el8
gnome-control-centerol 80:3.28.2-27.el8
gnome-control-center-filesystemol 80:3.28.2-27.el8
gnome-online-accountsol 80:3.28.2-2.el8
gnome-online-accounts-develol 80:3.28.2-2.el8
gnome-photosol 80:3.28.1-4.el8
gnome-photos-testsol 80:3.28.1-4.el8
gnome-settings-daemonol 80:3.32.0-14.el8
gnome-shellol 80:3.32.2-30.el8
gnome-shell-extension-apps-menuol 80:3.32.1-14.el8
gnome-shell-extension-auto-move-windowsol 80:3.32.1-14.el8
gnome-shell-extension-commonol 80:3.32.1-14.el8
gnome-shell-extension-dash-to-dockol 80:3.32.1-14.el8
gnome-shell-extension-desktop-iconsol 80:3.32.1-14.el8
gnome-shell-extension-disable-screenshieldol 80:3.32.1-14.el8
gnome-shell-extension-drive-menuol 80:3.32.1-14.el8
gnome-shell-extension-horizontal-workspacesol 80:3.32.1-14.el8
gnome-shell-extension-launch-new-instanceol 80:3.32.1-14.el8
gnome-shell-extension-native-window-placementol 80:3.32.1-14.el8
gnome-shell-extension-no-hot-cornerol 80:3.32.1-14.el8
gnome-shell-extension-panel-favoritesol 80:3.32.1-14.el8
gnome-shell-extension-places-menuol 80:3.32.1-14.el8
gnome-shell-extension-screenshot-window-sizerol 80:3.32.1-14.el8
gnome-shell-extension-systemMonitorol 80:3.32.1-14.el8
gnome-shell-extension-top-iconsol 80:3.32.1-14.el8
gnome-shell-extension-updates-dialogol 80:3.32.1-14.el8
gnome-shell-extension-user-themeol 80:3.32.1-14.el8
gnome-shell-extension-window-grouperol 80:3.32.1-14.el8
gnome-shell-extension-window-listol 80:3.32.1-14.el8
gnome-shell-extension-windowsNavigatorol 80:3.32.1-14.el8
gnome-shell-extension-workspace-indicatorol 80:3.32.1-14.el8
gnome-softwareol 80:3.36.1-5.el8
gnome-terminalol 80:3.28.3-3.el8
gnome-terminal-nautilusol 80:3.28.3-3.el8
gtk-docol 80:1.28-3.el8
gtk2ol 80:2.24.32-5.el8
gtk2-develol 80:2.24.32-5.el8
gtk2-devel-docsol 80:2.24.32-5.el8
gtk2-immodule-ximol 80:2.24.32-5.el8
gtk2-immodulesol 80:2.24.32-5.el8
gtkmm24ol 80:2.24.5-6.el8
gtkmm24-develol 80:2.24.5-6.el8
gtkmm24-docsol 80:2.24.5-6.el8
gtkmm30ol 80:3.22.2-3.el8
gtkmm30-develol 80:3.22.2-3.el8
gtkmm30-docol 80:3.22.2-3.el8
gvfsol 80:1.36.2-11.el8
gvfs-afcol 80:1.36.2-11.el8
gvfs-afpol 80:1.36.2-11.el8
gvfs-archiveol 80:1.36.2-11.el8
gvfs-clientol 80:1.36.2-11.el8
gvfs-develol 80:1.36.2-11.el8
gvfs-fuseol 80:1.36.2-11.el8
gvfs-goaol 80:1.36.2-11.el8
gvfs-gphoto2ol 80:1.36.2-11.el8
gvfs-mtpol 80:1.36.2-11.el8
gvfs-smbol 80:1.36.2-11.el8
libdazzleol 80:3.28.5-2.el8
libdazzle-develol 80:3.28.5-2.el8
libepubgenol 80:0.1.0-3.el8
libepubgen-develol 80:0.1.0-3.el8
libsassol 80:3.4.5-6.el8
libsass-develol 80:3.4.5-6.el8
libsigc++20ol 80:2.10.0-6.el8
libsigc++20-develol 80:2.10.0-6.el8
libsigc++20-docol 80:2.10.0-6.el8
libvisualol 81:0.4.0-25.el8
libvisual-develol 81:0.4.0-25.el8
mutterol 80:3.32.2-57.el8
mutter-develol 80:3.32.2-57.el8
nautilusol 80:3.28.1-15.el8
nautilus-develol 80:3.28.1-15.el8
nautilus-extensionsol 80:3.28.1-15.el8
pangommol 80:2.40.1-6.el8
pangomm-develol 80:2.40.1-6.el8
pangomm-docol 80:2.40.1-6.el8
soundtouchol 80:2.0.0-3.el8
soundtouch-develol 80:2.0.0-3.el8
valaol 80:0.40.19-2.el8
vala-develol 80:0.40.19-2.el8
webkit2gtk3ol 80:2.30.4-1.el8
webkit2gtk3-develol 80:2.30.4-1.el8
webkit2gtk3-jscol 80:2.30.4-1.el8
webkit2gtk3-jsc-develol 80:2.30.4-1.el8
woff2ol 80:1.0.2-5.el8
woff2-develol 80:1.0.2-5.el8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2020-13584 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a...8.8 0.0494 None reported
High CVE-2020-13543 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a...8.8 0.0349 None reported
High CVE-2019-13012 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a...7.5 0.0321 None reported
High CVE-2020-9951 iTunes: A use after free issue was addressed with improved memory management.8.8 0.0233 None reported
High CVE-2020-9983 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a...8.8 0.0220 None reported
High CVE-2020-9948 gdm: GNOME is the default desktop environment of Red Hat Enterprise Linux. The following packages have been upgraded to a...8.8 0.0169 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.