Linux · Security advisory · November 15, 2022

ALSA-2022:8100: Security update for 3 packages

ALSA-2022:8100, released November 15, 2022, fixes 1 CVE across 3 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0040

34th percentile

Fixed package versions

Product	Release	Fixed in
swtpm	almalinux 9	0.7.0-3.20211109gitb79fd91.el9
swtpm-libs	almalinux 9	0.7.0-3.20211109gitb79fd91.el9
swtpm-tools	almalinux 9	0.7.0-3.20211109gitb79fd91.el9

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2022-23645	netcf: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms		5.5	0.0040	None reported

Also fixes CVE-2022-23645

ELSA-2022-7472
hivex, hivex-devel, libguestfs and 126 more on ol 8
RLSA-2022:7472
hivex, libguestfs, libguestfs-winsupport and 15 more on rocky 8
RHSA-2022:7472
SLOF, hivex, hivex-devel and 127 more on RHEL 8
ELSA-2022-8100
swtpm, swtpm-libs, swtpm-tools on ol 9
RHSA-2022:8100
swtpm, swtpm-libs, swtpm-tools on RHEL 9
DEBIAN-CVE-2022-23645
swtpm on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://osv.dev/vulnerability/ALSA-2022:8100

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo