Linux · Security advisory · January 26, 2022
ALSA-2022:0290: Security update for 15 packages
ALSA-2022:0290, released January 26, 2022, fixes 4 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8060
99th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| parfait | almalinux 8 | 0.5.4-4.module_el8.5.0+235+62ea7738 |
| parfait-examples | almalinux 8 | 0.5.4-4.module_el8.5.0+2610+de2b8c0b |
| parfait-javadoc | almalinux 8 | 0.5.4-4.module_el8.5.0+235+62ea7738 |
| pcp-parfait-agent | almalinux 8 | 0.5.4-4.module_el8.5.0+2610+de2b8c0b |
| si-units | almalinux 8 | 0.6.5-2.module_el8.5.0+235+62ea7738 |
| si-units-javadoc | almalinux 8 | 0.6.5-2.module_el8.5.0+2610+de2b8c0b |
| unit-api | almalinux 8 | 1.0-5.module_el8.5.0+2610+de2b8c0b |
| unit-api-javadoc | almalinux 8 | 1.0-5.module_el8.5.0+2610+de2b8c0b |
| uom-lib | almalinux 8 | 1.0.1-6.module_el8.5.0+2610+de2b8c0b |
| uom-lib-javadoc | almalinux 8 | 1.0.1-6.module_el8.5.0+2610+de2b8c0b |
| uom-parent | almalinux 8 | 1.0.3-3.module_el8.5.0+235+62ea7738 |
| uom-se | almalinux 8 | 1.0.4-3.module_el8.5.0+235+62ea7738 |
| uom-se-javadoc | almalinux 8 | 1.0.4-3.module_el8.5.0+235+62ea7738 |
| uom-systems | almalinux 8 | 0.7-1.module_el8.5.0+235+62ea7738 |
| uom-systems-javadoc | almalinux 8 | 0.7-1.module_el8.5.0+2610+de2b8c0b |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-4104 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.8060 | None reported | |
| High | CVE-2022-23305 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 9.8 | 0.6654 | None reported | |
| High | CVE-2022-23302 | uom-lib-javadoc: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.6384 | None reported | |
| High | CVE-2022-23307 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.5441 | None reported |
Showing 1 to 4 of 4
1