Linux · Security advisory · August 18, 2022

ELSA-2022-9720: cri-o security update

ELSA-2022-9720, released August 18, 2022, fixes 1 CVE in cri-o (version 0:1.22.5-1.el8). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0317

88th percentile

Fixed package versions

Product	Release	Fixed in
cri-o	ol 8	0:1.22.5-1.el8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2022-1708	aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...		7.5	0.0317	None reported

Also fixes CVE-2022-1708

RLSA-2022:7529
buildah, cockpit-podman, conmon and 13 more on rocky 8
ALSA-2022:7529
buildah, buildah-tests, cockpit-podman and 25 more on almalinux 8
RHSA-2022:7529
buildah, buildah-tests, cockpit-podman and 25 more on RHEL 8
ELSA-2022-7457
aardvark-dns, buildah, buildah-tests and 29 more on ol 8
RLSA-2022:7469
buildah, cockpit-podman, conmon and 15 more on rocky 8
ALSA-2022:7469
aardvark-dns, buildah, buildah-tests and 31 more on almalinux 8
RHSA-2022:7469
aardvark-dns, buildah, buildah-tests and 31 more on RHEL 8
ELSA-2022-7529
buildah, buildah-tests, cockpit-podman and 23 more on ol 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2022-9720.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo