Linux · Security advisory · January 26, 2022
RHSA-2022:0290: Security update for 15 packages
RHSA-2022:0290, released January 26, 2022, fixes 4 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8060
99th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| parfait | RHEL 8 | 0:0.5.4-4.module+el8.5.0+13988+de2b8c0b |
| parfait-examples | RHEL 8 | 0:0.5.4-4.module+el8.5.0+13988+de2b8c0b |
| parfait-javadoc | RHEL 8 | 0:0.5.4-4.module+el8.5.0+13988+de2b8c0b |
| pcp-parfait-agent | RHEL 8 | 0:0.5.4-4.module+el8.5.0+13988+de2b8c0b |
| si-units | RHEL 8 | 0:0.6.5-2.module+el8+2463+615f6896 |
| si-units-javadoc | RHEL 8 | 0:0.6.5-2.module+el8+2463+615f6896 |
| unit-api | RHEL 8 | 0:1.0-5.module+el8+2463+615f6896 |
| unit-api-javadoc | RHEL 8 | 0:1.0-5.module+el8+2463+615f6896 |
| uom-lib | RHEL 8 | 0:1.0.1-6.module+el8+2463+615f6896 |
| uom-lib-javadoc | RHEL 8 | 0:1.0.1-6.module+el8+2463+615f6896 |
| uom-parent | RHEL 8 | 0:1.0.3-3.module+el8+2463+615f6896 |
| uom-se | RHEL 8 | 0:1.0.4-3.module+el8+2463+615f6896 |
| uom-se-javadoc | RHEL 8 | 0:1.0.4-3.module+el8+2463+615f6896 |
| uom-systems | RHEL 8 | 0:0.7-1.module+el8+2463+615f6896 |
| uom-systems-javadoc | RHEL 8 | 0:0.7-1.module+el8+2463+615f6896 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-4104 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.8060 | None reported | |
| High | CVE-2022-23305 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 9.8 | 0.6654 | None reported | |
| High | CVE-2022-23302 | uom-lib-javadoc: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.6384 | None reported | |
| High | CVE-2022-23307 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.5441 | None reported |
Showing 1 to 4 of 4
1