Linux · Security advisory · May 10, 2022

RHSA-2022:1762: Security update for 34 packages

RHSA-2022:1762, released May 10, 2022, fixes 6 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0599
93rd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.0.1-27.module+el8.6.0+14673+621cb8be
buildahRHEL 81:1.24.2-4.module+el8.6.0+14673+621cb8be
buildah-testsRHEL 81:1.24.2-4.module+el8.6.0+14673+621cb8be
cockpit-podmanRHEL 80:43-1.module+el8.6.0+14673+621cb8be
conmonRHEL 82:2.1.0-1.module+el8.6.0+14673+621cb8be
container-selinuxRHEL 82:2.179.1-1.module+el8.6.0+14673+621cb8be
containernetworking-pluginsRHEL 81:1.0.1-2.module+el8.6.0+14673+621cb8be
containers-commonRHEL 82:1-27.module+el8.6.0+14673+621cb8be
critRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
criuRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
criu-develRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
criu-libsRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
crunRHEL 80:1.4.4-1.module+el8.6.0+14673+621cb8be
fuse-overlayfsRHEL 80:1.8.2-1.module+el8.6.0+14673+621cb8be
libslirpRHEL 80:4.4.0-1.module+el8.6.0+14673+621cb8be
libslirp-develRHEL 80:4.4.0-1.module+el8.6.0+14673+621cb8be
netavarkRHEL 82:1.0.1-27.module+el8.6.0+14673+621cb8be
oci-seccomp-bpf-hookRHEL 80:1.2.3-3.module+el8.6.0+14673+621cb8be
podmanRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-catatonitRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-dockerRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-gvproxyRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-pluginsRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-remoteRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-testsRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
python3-criuRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
python3-podmanRHEL 80:4.0.0-1.module+el8.6.0+14673+621cb8be
runcRHEL 81:1.0.3-2.module+el8.6.0+14673+621cb8be
skopeoRHEL 82:1.6.1-2.module+el8.6.0+14673+621cb8be
skopeo-testsRHEL 82:1.6.1-2.module+el8.6.0+14673+621cb8be
slirp4netnsRHEL 80:1.1.8-2.module+el8.6.0+14673+621cb8be
toolboxRHEL 80:0.0.99.3-0.4.module+el8.6.0+14673+621cb8be
toolbox-testsRHEL 80:0.0.99.3-0.4.module+el8.6.0+14673+621cb8be
udicaRHEL 80:0.2.6-2.module+el8.6.0+14673+621cb8be

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-21698 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0599 None reported
High CVE-2022-1227 podman-catatonit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.8 0.0417 None reported
High CVE-2020-28851 buildah-tests: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.5 0.0233 None reported
High CVE-2022-27649 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0143 None reported
High CVE-2022-27651 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0126 None reported
High CVE-2022-27650 crit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0124 None reported
Showing 1 to 6 of 6 1