Linux · Security advisory · March 15, 2022
ALSA-2022:0886: Security update for 19 packages
ALSA-2022:0886, released March 15, 2022, fixes 2 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0104
64th percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libiscsi | almalinux 8 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| libiscsi-devel | almalinux 8 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| libiscsi-utils | almalinux 8 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| libvirt-dbus | almalinux 8 | 1.3.0-2.module_el8.6.0+2880+7d9e3703 |
| netcf | almalinux 8 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| netcf-devel | almalinux 8 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| netcf-libs | almalinux 8 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| qemu-guest-agent | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-img | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm-block-curl | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm-block-gluster | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm-block-iscsi | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm-block-rbd | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm-block-ssh | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm-common | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| qemu-kvm-core | almalinux 8 | 15:4.2.0-59.module_el8.5.0+2629+68d2f392.2 |
| sgabios | almalinux 8 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| sgabios-bin | almalinux 8 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2018-13405 | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... | n/a | 0.0104 | None reported | |
| High | CVE-2022-0358 | netcf-libs: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 7.8 | 0.0033 | None reported |
Showing 1 to 2 of 2
1