Linux · Security advisory · October 25, 2022

ALSA-2022:7133: Security update for 6 packages

ALSA-2022:7133, released October 25, 2022, fixes 1 CVE across 6 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0158
75th percentile

Fixed package versions

ProductReleaseFixed in
389-ds-basealmalinux 81.4.3.28-8.module_el8.6.0+3338+ebccfef1
389-ds-base-develalmalinux 81.4.3.28-8.module_el8.6.0+3338+ebccfef1
389-ds-base-legacy-toolsalmalinux 81.4.3.28-8.module_el8.6.0+3338+ebccfef1
389-ds-base-libsalmalinux 81.4.3.28-8.module_el8.6.0+3338+ebccfef1
389-ds-base-snmpalmalinux 81.4.3.28-8.module_el8.6.0+3338+ebccfef1
python3-lib389almalinux 81.4.3.28-8.module_el8.6.0+3338+ebccfef1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-2850 389-ds-base-legacy-tools: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server 7.5 0.0158 None reported
Showing 1 to 1 of 1 1