RHSB-2021-005

Red Hat Enterprise Linux 8.4 Security Release Notes

Release Date: May 18, 2021
Release: Red Hat Enterprise Linux 8.4

In this product release, Red Hat Enterprise Linux 8.4 has undergone various improvements and additions, including feature enhancements, bug fixes, and security updates.. As part of our commitment to providing the latest security information, we have compiled the security fixes addressed in this product release.

To access and download Red Hat Enterprise Linux 8.4, please visit: https://access.redhat.com/downloads/.

Highlights

The following components with associated severity rating in Red Hat Enterprise Linux 8.4 were affected:

• Important severity issues fixed in kernel, kernel-rt, linux-firmware
• Moderate severity issues fixed in GNOME, NetworkManager, bluez, brotli, container-tools:rhel8, cpio, curl, dovecot, freerdp, ghostscript, glibc, go-toolset:rhel8, grafana, gssdp, httpd:2.4, idm:DL1, krb5, libvncserver, libxml2, mailman:2.1, mingw, opensc, p11-kit, pandoc, perl, pki-core:10.6, poppler, python-cryptography, python-lxml, python-urllib3, python27:2.7, python3, python38:3.8, qt5-qtbase, raptor2, samba, sane-backends, shim, spice-vdagent, sqlite, systemd, tigervnc, trousers, unbound, userspace, virt:rhel, wpa_supplicant
• Low severity issues fixed in bash, evolution, exiv2, libdb, rust-toolset:rhel8, spice, sudo

Details

The list contains all security fixes for each product component and the designated Common Vulnerability Exposure (CVE). The CVE page contains more information about the flaw affecting the component while the errata contains more information about the fix.

• Important: kernel RHSA-2021:1578
• CVE-2019-18811, CVE-2019-19523, CVE-2019-19528, CVE-2020-0431, CVE-2020-11608, CVE-2020-12114, CVE-2020-12362, CVE-2020-12464, CVE-2020-14314, CVE-2020-14356, CVE-2020-15437, CVE-2020-24394, CVE-2020-25212, CVE-2020-25284, CVE-2020-25285, CVE-2020-25643, CVE-2020-25704, CVE-2020-27786, CVE-2020-27835, CVE-2020-28974, CVE-2020-35508, CVE-2020-36322, CVE-2021-0342
• Important: linux-firmware RHSA-2021:1620
• CVE-2020-12362
• Important: kernel-rt RHSA-2021:1739
• CVE-2019-19523, CVE-2019-19528, CVE-2020-0431, CVE-2020-11608, CVE-2020-12114, CVE-2020-12362, CVE-2020-12464, CVE-2020-14314, CVE-2020-14356, CVE-2020-15437, CVE-2020-24394, CVE-2020-25212, CVE-2020-25284, CVE-2020-25285, CVE-2020-25643, CVE-2020-25704, CVE-2020-27786, CVE-2020-27835, CVE-2020-28974, CVE-2020-35508, CVE-2021-0342
• Moderate: NetworkManager RHSA-2021:1574
• CVE-2021-20297
• Moderate: sqlite RHSA-2021:1581
• CVE-2020-13434, CVE-2020-15358
• Moderate: cpio RHSA-2021:1582
• CVE-2019-14866
• Moderate: glibc RHSA-2021:1585
• CVE-2016-10228, CVE-2019-25013, CVE-2019-9169, CVE-2020-27618, CVE-2021-3326
• Moderate: GNOME RHSA-2021:1586
• CVE-2019-13012, CVE-2020-13543, CVE-2020-13584, CVE-2020-9948, CVE-2020-9951, CVE-2020-9983
• Moderate: krb5 RHSA-2021:1593
• CVE-2020-28196
• Moderate: libxml2 RHSA-2021:1597
• CVE-2020-24977
• Moderate: bluez RHSA-2021:1598
• CVE-2020-27153
• Moderate: opensc RHSA-2021:1600
• CVE-2020-26570, CVE-2020-26571, CVE-2020-26572
• Moderate: python-cryptography RHSA-2021:1608
• CVE-2020-25659, CVE-2020-36242
• Moderate: p11-kit RHSA-2021:1609
• CVE-2020-29361, CVE-2020-29362, CVE-2020-29363
• Moderate: curl RHSA-2021:1610
• CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286
• Moderate: systemd RHSA-2021:1611
• CVE-2019-3842, CVE-2020-13776
• Moderate: trousers RHSA-2021:1627
• CVE-2020-24330, CVE-2020-24331, CVE-2020-24332
• Moderate: python-urllib3 RHSA-2021:1631
• CVE-2020-26137
• Moderate: python3 RHSA-2021:1633
• CVE-2020-26116, CVE-2020-27619, CVE-2021-23336, CVE-2021-3177
• Moderate: samba RHSA-2021:1647
• CVE-2020-14318, CVE-2020-14323, CVE-2020-1472
• Moderate: perl RHSA-2021:1678
• CVE-2020-10543, CVE-2020-10878
• Moderate: wpa_supplicant RHSA-2021:1686
• CVE-2021-0326
• Moderate: brotli RHSA-2021:1702
• CVE-2020-8927
• Moderate: shim RHSA-2021:1734
• CVE-2020-14372, CVE-2020-25632, CVE-2020-25647, CVE-2020-27749, CVE-2020-27779, CVE-2021-20225, CVE-2021-20233
• Moderate: sane-backends RHSA-2021:1744
• CVE-2020-12867
• Moderate: go-toolset:rhel8 RHSA-2021:1746
• CVE-2021-3114, CVE-2021-3115
• Moderate: mailman:2.1 RHSA-2021:1751
• CVE-2020-12108, CVE-2020-15011
• Moderate: qt5-qtbase RHSA-2021:1756
• CVE-2020-17507
• Moderate: python27:2.7 RHSA-2021:1761
• CVE-2020-26116, CVE-2020-26137, CVE-2020-27783, CVE-2021-3177
• Moderate: virt:rhel RHSA-2021:1762
• CVE-2020-11947, CVE-2020-16092, CVE-2020-25637, CVE-2020-25707, CVE-2020-25723, CVE-2020-27821, CVE-2020-28916, CVE-2020-29129, CVE-2020-29130, CVE-2020-29443
• Moderate: pki-core:10.6 RHSA-2021:1775
• CVE-2020-1695
• Moderate: tigervnc RHSA-2021:1783
• CVE-2020-26117
• Moderate: gssdp RHSA-2021:1789
• CVE-2020-12695
• Moderate: spice-vdagent RHSA-2021:1791
• CVE-2020-25650, CVE-2020-25651, CVE-2020-25652, CVE-2020-25653
• Moderate: container-tools:rhel8 RHSA-2021:1796
• CVE-2020-29652, CVE-2021-20199
• Moderate: userspace RHSA-2021:1804
• CVE-2020-14344, CVE-2020-14345, CVE-2020-14346, CVE-2020-14347, CVE-2020-14360, CVE-2020-14361, CVE-2020-14362, CVE-2020-14363, CVE-2020-25712
• Moderate: httpd:2.4 RHSA-2021:1809
• CVE-2018-17199, CVE-2020-11984, CVE-2020-11993
• Moderate: libvncserver RHSA-2021:1811
• CVE-2018-21247, CVE-2019-20839, CVE-2020-14397, CVE-2020-14405, CVE-2020-25708
• Moderate: raptor2 RHSA-2021:1842
• CVE-2017-18926, CVE-2020-25713
• Moderate: idm:DL1 RHSA-2021:1846
• CVE-2020-11023
• Moderate: freerdp RHSA-2021:1849
• CVE-2020-11095, CVE-2020-11096, CVE-2020-11097, CVE-2020-11098, CVE-2020-11099, CVE-2020-15103, CVE-2020-4030, CVE-2020-4033
• Moderate: ghostscript RHSA-2021:1852
• CVE-2020-14373, CVE-2020-16287, CVE-2020-16288, CVE-2020-16289, CVE-2020-16290, CVE-2020-16291, CVE-2020-16292, CVE-2020-16293, CVE-2020-16294, CVE-2020-16295, CVE-2020-16296, CVE-2020-16297, CVE-2020-16298, CVE-2020-16299, CVE-2020-16300, CVE-2020-16301, CVE-2020-16302, CVE-2020-16303, CVE-2020-16304, CVE-2020-16305, CVE-2020-16306, CVE-2020-16307, CVE-2020-16308, CVE-2020-16309, CVE-2020-16310, CVE-2020-17538
• Moderate: unbound RHSA-2021:1853
• CVE-2019-25032, CVE-2019-25034, CVE-2019-25035, CVE-2019-25036, CVE-2019-25037, CVE-2019-25038, CVE-2019-25039, CVE-2019-25040, CVE-2019-25041, CVE-2019-25042, CVE-2020-28935
• Moderate: grafana RHSA-2021:1859
• CVE-2020-24303, CVE-2020-27846
• Moderate: python38:3.8 RHSA-2021:1879
• CVE-2020-26116, CVE-2020-27783, CVE-2021-3177
• Moderate: poppler RHSA-2021:1881
• CVE-2020-27778
• Moderate: dovecot RHSA-2021:1887
• CVE-2020-24386, CVE-2020-25275
• Moderate: python-lxml RHSA-2021:1898
• CVE-2020-27783
• Moderate: mingw RHSA-2021:1968
• CVE-2019-16168, CVE-2020-13434, CVE-2020-13630, CVE-2020-13631, CVE-2020-13632
• Moderate: pandoc RHSA-2021:1972
• CVE-2020-5238
• Low: libdb RHSA-2021:1675
• CVE-2019-2708
• Low: bash RHSA-2021:1679
• CVE-2019-18276
• Low: sudo RHSA-2021:1723
• CVE-2021-23239, CVE-2021-23240
• Low: evolution RHSA-2021:1752
• CVE-2020-16117
• Low: exiv2 RHSA-2021:1758
• CVE-2019-17402
• Low: spice RHSA-2021:1924
• CVE-2021-20201
• Low: rust-toolset:rhel8 RHSA-2021:1935
• CVE-2020-36317, CVE-2020-36318

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/security/updates/classification/#low
• 8.4 Release Notes