Linux · Security advisory · October 25, 2022

RHSA-2022:7108: Security update for 5 packages

RHSA-2022:7108, released October 25, 2022, fixes 2 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0166
76th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
lemonRHEL 80:3.26.0-16.el8_6
sqliteRHEL 80:3.26.0-16.el8_6
sqlite-develRHEL 80:3.26.0-16.el8_6
sqlite-docRHEL 80:3.26.0-16.el8_6
sqlite-libsRHEL 80:3.26.0-16.el8_6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-35527 lemon: SQLite is a C library that implements an SQL database engine 9.8 0.0166 None reported
High CVE-2020-35525 lemon: SQLite is a C library that implements an SQL database engine 8.1 0.0163 None reported
Showing 1 to 2 of 2 1