Linux · Security advisory · April 28, 2022

ELSA-2022-1565: Security update for 26 packages

ELSA-2022-1565, released April 28, 2022, fixes 2 CVEs across 26 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0143
73rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
buildahol 80:1.19.9-2.module+el8.5.0+20637+38ac8416
buildah-testsol 80:1.19.9-2.module+el8.5.0+20637+38ac8416
cockpit-podmanol 80:29-2.module+el8.5.0+20637+38ac8416
conmonol 82:2.0.26-1.module+el8.5.0+20637+38ac8416
container-selinuxol 82:2.167.0-1.module+el8.5.0+20637+38ac8416
containernetworking-pluginsol 80:0.9.1-1.module+el8.5.0+20637+38ac8416
containers-commonol 81:1.2.4-1.0.1.module+el8.5.0+20637+38ac8416
critol 80:3.15-1.module+el8.5.0+20637+38ac8416
criuol 80:3.15-1.module+el8.5.0+20637+38ac8416
crunol 80:0.18-2.module+el8.5.0+20637+38ac8416
fuse-overlayfsol 80:1.4.0-2.module+el8.5.0+20637+38ac8416
libslirpol 80:4.3.1-1.module+el8.5.0+20637+38ac8416
libslirp-develol 80:4.3.1-1.module+el8.5.0+20637+38ac8416
oci-seccomp-bpf-hookol 80:1.2.0-3.module+el8.5.0+20637+38ac8416
podmanol 80:3.0.1-8.module+el8.5.0+20637+38ac8416
podman-catatonitol 80:3.0.1-8.module+el8.5.0+20637+38ac8416
podman-dockerol 80:3.0.1-8.module+el8.5.0+20637+38ac8416
podman-pluginsol 80:3.0.1-8.module+el8.5.0+20637+38ac8416
podman-remoteol 80:3.0.1-8.module+el8.5.0+20637+38ac8416
podman-testsol 80:3.0.1-8.module+el8.5.0+20637+38ac8416
python3-criuol 80:3.15-1.module+el8.5.0+20637+38ac8416
runcol 80:1.0.0-73.rc95.module+el8.5.0+20637+38ac8416
skopeool 81:1.2.4-1.0.1.module+el8.5.0+20637+38ac8416
skopeo-testsol 81:1.2.4-1.0.1.module+el8.5.0+20637+38ac8416
slirp4netnsol 80:1.1.8-1.module+el8.5.0+20637+38ac8416
udicaol 80:0.2.4-1.module+el8.5.0+20637+38ac8416

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-27649 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0143 None reported
High CVE-2022-27651 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0126 None reported
Showing 1 to 2 of 2 1