Linux · Security advisory · August 5, 2022

ELSA-2022-5821: Security update for 29 packages

ELSA-2022-5821, released August 5, 2022, fixes 4 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0274
86th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
libguestfs-applianceol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libnbd-bash-completionol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
libtpmsol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+20659+3dcf7c70
libtpms-develol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+20659+3dcf7c70
libvirt-wiresharkol 80:8.0.0-5.2.0.1.module+el8.6.0+20722+b0f1ae3c
nbdkit-gzip-filterol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-nbd-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-tar-filterol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-tar-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-tmpdisk-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
ocaml-hivexol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
ocaml-hivex-develol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
ocaml-libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
ocaml-libguestfs-develol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
ocaml-libnbdol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
ocaml-libnbd-develol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
qemu-kvm-docsol 815:6.2.0-11.module+el8.6.0+20722+b0f1ae3c.2
qemu-kvm-hw-usbredirol 815:6.2.0-11.module+el8.6.0+20722+b0f1ae3c.2
qemu-kvm-testsol 815:6.2.0-11.module+el8.6.0+20722+b0f1ae3c.2
qemu-kvm-ui-openglol 815:6.2.0-11.module+el8.6.0+20722+b0f1ae3c.2
qemu-kvm-ui-spiceol 815:6.2.0-11.module+el8.6.0+20722+b0f1ae3c.2
swtpmol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-develol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-libsol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-toolsol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-tools-pkcs11ol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
virt-v2v-bash-completionol 81:1.42.0-19.0.1.module+el8.6.0+20722+b0f1ae3c
virt-v2v-man-pages-jaol 81:1.42.0-19.0.1.module+el8.6.0+20722+b0f1ae3c
virt-v2v-man-pages-ukol 81:1.42.0-19.0.1.module+el8.6.0+20722+b0f1ae3c

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-26353 qemu-system-arm: A flaw was found in the virtio-net device of QEMU 7.5 0.0274 None reported
High CVE-2021-4206 qemu-block-extra: A flaw was found in the QXL display device emulation in QEMU 8.2 0.0083 None reported
High CVE-2021-4207 qemu-block-extra: A flaw was found in the QXL display device emulation in QEMU 8.8 0.0040 None reported
High CVE-2022-26354 qemu-system-arm: A flaw was found in the vhost-vsock device of QEMU 7.5 0.0039 None reported
Showing 1 to 4 of 4 1