Linux · Security advisory · January 27, 2022
ELSA-2022-0290: Security update for 15 packages
ELSA-2022-0290, released January 27, 2022, fixes 4 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8060
99th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| parfait | ol 8 | 0:0.5.4-4.module+el8.5.0+20480+407d1823 |
| parfait-examples | ol 8 | 0:0.5.4-4.module+el8.5.0+20480+407d1823 |
| parfait-javadoc | ol 8 | 0:0.5.4-4.module+el8.5.0+20480+407d1823 |
| pcp-parfait-agent | ol 8 | 0:0.5.4-4.module+el8.5.0+20480+407d1823 |
| si-units | ol 8 | 0:0.6.5-2.module+el8+5163+abb6ece5 |
| si-units-javadoc | ol 8 | 0:0.6.5-2.module+el8+5163+abb6ece5 |
| unit-api | ol 8 | 0:1.0-5.module+el8+5163+abb6ece5 |
| unit-api-javadoc | ol 8 | 0:1.0-5.module+el8+5163+abb6ece5 |
| uom-lib | ol 8 | 0:1.0.1-6.module+el8+5163+abb6ece5 |
| uom-lib-javadoc | ol 8 | 0:1.0.1-6.module+el8+5163+abb6ece5 |
| uom-parent | ol 8 | 0:1.0.3-3.module+el8+5163+abb6ece5 |
| uom-se | ol 8 | 0:1.0.4-3.module+el8+5163+abb6ece5 |
| uom-se-javadoc | ol 8 | 0:1.0.4-3.module+el8+5163+abb6ece5 |
| uom-systems | ol 8 | 0:0.7-1.module+el8+5163+abb6ece5 |
| uom-systems-javadoc | ol 8 | 0:0.7-1.module+el8+5163+abb6ece5 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-4104 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.8060 | None reported | |
| High | CVE-2022-23305 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 9.8 | 0.6654 | None reported | |
| High | CVE-2022-23302 | uom-lib-javadoc: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.6384 | None reported | |
| High | CVE-2022-23307 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.5441 | None reported |
Showing 1 to 4 of 4
1