Linux · Security advisory · October 13, 2022

ELSA-2022-9862: Security update for 119 packages

ELSA-2022-9862, released October 13, 2022, fixes 4 CVEs across 119 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0274
86th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 3 Routine 1

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-23.module+el8.6.0+20842+e9607200
hivex-develol 80:1.3.18-23.module+el8.6.0+20842+e9607200
libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-applianceol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-bash-completionol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-develol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-gfs2ol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-gobjectol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-gobject-develol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-inspect-iconsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-javaol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-java-develol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-javadocol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-man-pages-jaol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-man-pages-ukol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-rescueol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-rsyncol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-toolsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-tools-col 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libguestfs-winsupportol 80:8.6-1.module+el8.6.0+20842+e9607200
libguestfs-xfsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
libiscsiol 80:1.18.0-8.module+el8.6.0+20842+e9607200
libiscsi-develol 80:1.18.0-8.module+el8.6.0+20842+e9607200
libiscsi-utilsol 80:1.18.0-8.module+el8.6.0+20842+e9607200
libnbdol 80:1.6.0-5.module+el8.6.0+20842+e9607200
libnbd-bash-completionol 80:1.6.0-5.module+el8.6.0+20842+e9607200
libnbd-develol 80:1.6.0-5.module+el8.6.0+20842+e9607200
libtpmsol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+20842+e9607200
libtpms-develol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+20842+e9607200
libvirtol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-clientol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemonol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-config-networkol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-config-nwfilterol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-interfaceol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-networkol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-nodedevol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-nwfilterol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-qemuol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-secretol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storageol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-coreol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-diskol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-glusterol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-iscsiol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-iscsi-directol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-logicalol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-mpathol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-rbdol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-driver-storage-scsiol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-daemon-kvmol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-dbusol 80:1.3.0-2.module+el8.6.0+20842+e9607200
libvirt-develol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-docsol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-libsol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-lock-sanlockol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-nssol 80:7.10.0-2.module+el8.6.0+20842+e9607200
libvirt-wiresharkol 80:7.10.0-2.module+el8.6.0+20842+e9607200
lua-guestfsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
nbdfuseol 80:1.6.0-5.module+el8.6.0+20842+e9607200
nbdkitol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-bash-completionol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-basic-filtersol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-basic-pluginsol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-curl-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-develol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-example-pluginsol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-gzip-filterol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-gzip-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-linuxdisk-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-nbd-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-python-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-serverol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-ssh-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-tar-filterol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-tar-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-tmpdisk-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-vddk-pluginol 80:1.24.0-4.module+el8.6.0+20842+e9607200
nbdkit-xz-filterol 80:1.24.0-4.module+el8.6.0+20842+e9607200
netcfol 80:0.2.8-12.module+el8.6.0+20842+e9607200
netcf-develol 80:0.2.8-12.module+el8.6.0+20842+e9607200
netcf-libsol 80:0.2.8-12.module+el8.6.0+20842+e9607200
perl-Sys-Guestfsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
perl-Sys-Virtol 80:6.0.0-1.module+el8.6.0+20842+e9607200
perl-hivexol 80:1.3.18-23.module+el8.6.0+20842+e9607200
python3-hivexol 80:1.3.18-23.module+el8.6.0+20842+e9607200
python3-libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
python3-libnbdol 80:1.6.0-5.module+el8.6.0+20842+e9607200
python3-libvirtol 80:7.10.0-2.module+el8.6.0+20842+e9607200
qemu-guest-agentol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-imgol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvmol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvm-block-curlol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvm-block-glusterol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvm-block-iscsiol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvm-block-rbdol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvm-block-sshol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvm-commonol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-kvm-coreol 815:6.1.1-4.module+el8.6.0+20842+e9607200
qemu-virtiofsdol 815:6.1.1-4.module+el8.6.0+20842+e9607200
ruby-hivexol 80:1.3.18-23.module+el8.6.0+20842+e9607200
ruby-libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
seabiosol 80:1.15.0-2.module+el8.6.0+20842+e9607200
seabios-binol 80:1.15.0-2.module+el8.6.0+20842+e9607200
seavgabios-binol 80:1.15.0-2.module+el8.6.0+20842+e9607200
sgabiosol 81:0.20170427git-3.module+el8.6.0+20842+e9607200
sgabios-binol 81:0.20170427git-3.module+el8.6.0+20842+e9607200
superminol 80:5.2.1-1.module+el8.6.0+20842+e9607200
supermin-develol 80:5.2.1-1.module+el8.6.0+20842+e9607200
swtpmol 80:0.7.0-3.20211109gitb79fd91.module+el8.6.0+20842+e9607200
swtpm-develol 80:0.7.0-3.20211109gitb79fd91.module+el8.6.0+20842+e9607200
swtpm-libsol 80:0.7.0-3.20211109gitb79fd91.module+el8.6.0+20842+e9607200
swtpm-toolsol 80:0.7.0-3.20211109gitb79fd91.module+el8.6.0+20842+e9607200
swtpm-tools-pkcs11ol 80:0.7.0-3.20211109gitb79fd91.module+el8.6.0+20842+e9607200
virt-dibol 81:1.44.0-5.0.1.module+el8.6.0+20842+e9607200
virt-v2vol 81:1.42.0-19.0.1.module+el8.6.0+20842+e9607200
virt-v2v-bash-completionol 81:1.42.0-19.0.1.module+el8.6.0+20842+e9607200
virt-v2v-man-pages-jaol 81:1.42.0-19.0.1.module+el8.6.0+20842+e9607200
virt-v2v-man-pages-ukol 81:1.42.0-19.0.1.module+el8.6.0+20842+e9607200

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-26353 qemu-system-arm: A flaw was found in the virtio-net device of QEMU 7.5 0.0274 None reported
High CVE-2021-4206 qemu-block-extra: A flaw was found in the QXL display device emulation in QEMU 8.2 0.0083 None reported
High CVE-2021-4207 qemu-block-extra: A flaw was found in the QXL display device emulation in QEMU 8.8 0.0040 None reported
Routine CVE-2022-0216 qemu: A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU 4.4 0.0043 None reported
Showing 1 to 4 of 4 1