Linux · Security advisory · November 22, 2022
ELSA-2022-7954: Security update for 7 packages
ELSA-2022-7954, released November 22, 2022, fixes 8 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0698
94th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 0
High 5
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| podman | ol 9 | 2:4.2.0-3.0.1.el9 |
| podman-catatonit | ol 9 | 2:4.2.0-3.0.1.el9 |
| podman-docker | ol 9 | 2:4.2.0-3.0.1.el9 |
| podman-gvproxy | ol 9 | 2:4.2.0-3.0.1.el9 |
| podman-plugins | ol 9 | 2:4.2.0-3.0.1.el9 |
| podman-remote | ol 9 | 2:4.2.0-3.0.1.el9 |
| podman-tests | ol 9 | 2:4.2.0-3.0.1.el9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-34558 | grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB | 7.5 | 0.0698 | None reported | |
| High | CVE-2022-27191 | docker-stable: This update for docker-stable fixes the following issues: Note this update contains a already fixed references mostl... | 7.5 | 0.0396 | None reported | |
| High | CVE-2020-28851 | buildah-tests: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... | 7.5 | 0.0233 | None reported | |
| High | CVE-2021-33197 | grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB | 7.5 | 0.0226 | None reported | |
| High | CVE-2020-28852 | git-lfs: Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text poi... | 7.5 | 0.0174 | None reported | |
| Routine | CVE-2021-20291 | podman-remote: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... | 6.5 | 0.0159 | None reported | |
| Routine | CVE-2021-20199 | udica: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... | 5.9 | 0.0116 | None reported | |
| Routine | CVE-2021-4024 | crun: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... | 6.5 | 0.0114 | None reported |
Showing 1 to 8 of 8
1