Linux · Security advisory · November 8, 2022

RHSA-2022:7457: Security update for 34 packages

RHSA-2022:7457, released November 8, 2022, fixes 2 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0311
87th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.1.0-4.module+el8.7.0+16772+33343656
buildahRHEL 81:1.27.0-2.module+el8.7.0+16772+33343656
buildah-testsRHEL 81:1.27.0-2.module+el8.7.0+16772+33343656
cockpit-podmanRHEL 80:53-1.module+el8.7.0+16772+33343656
conmonRHEL 83:2.1.4-1.module+el8.7.0+16772+33343656
container-selinuxRHEL 82:2.189.0-1.module+el8.7.0+16772+33343656
containernetworking-pluginsRHEL 81:1.1.1-3.module+el8.7.0+16772+33343656
containers-commonRHEL 82:1-40.module+el8.7.0+16772+33343656
critRHEL 80:3.15-3.module+el8.7.0+16772+33343656
criuRHEL 80:3.15-3.module+el8.7.0+16772+33343656
criu-develRHEL 80:3.15-3.module+el8.7.0+16772+33343656
criu-libsRHEL 80:3.15-3.module+el8.7.0+16772+33343656
crunRHEL 80:1.5-1.module+el8.7.0+16772+33343656
fuse-overlayfsRHEL 80:1.9-1.module+el8.7.0+16772+33343656
libslirpRHEL 80:4.4.0-1.module+el8.7.0+16772+33343656
libslirp-develRHEL 80:4.4.0-1.module+el8.7.0+16772+33343656
netavarkRHEL 82:1.1.0-6.module+el8.7.0+16772+33343656
oci-seccomp-bpf-hookRHEL 80:1.2.6-1.module+el8.7.0+16772+33343656
podmanRHEL 83:4.2.0-1.module+el8.7.0+16772+33343656
podman-catatonitRHEL 83:4.2.0-1.module+el8.7.0+16772+33343656
podman-dockerRHEL 83:4.2.0-1.module+el8.7.0+16772+33343656
podman-gvproxyRHEL 83:4.2.0-1.module+el8.7.0+16772+33343656
podman-pluginsRHEL 83:4.2.0-1.module+el8.7.0+16772+33343656
podman-remoteRHEL 83:4.2.0-1.module+el8.7.0+16772+33343656
podman-testsRHEL 83:4.2.0-1.module+el8.7.0+16772+33343656
python3-criuRHEL 80:3.15-3.module+el8.7.0+16772+33343656
python3-podmanRHEL 80:4.2.0-1.module+el8.7.0+16772+33343656
runcRHEL 81:1.1.4-1.module+el8.7.0+16772+33343656
skopeoRHEL 82:1.9.2-1.module+el8.7.0+16772+33343656
skopeo-testsRHEL 82:1.9.2-1.module+el8.7.0+16772+33343656
slirp4netnsRHEL 80:1.2.0-2.module+el8.7.0+16772+33343656
toolboxRHEL 80:0.0.99.3-0.6.module+el8.7.0+16772+33343656
toolbox-testsRHEL 80:0.0.99.3-0.6.module+el8.7.0+16772+33343656
udicaRHEL 80:0.2.6-3.module+el8.7.0+16772+33343656

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-36221 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0311 None reported
High CVE-2021-41190 docker-stable: This update for docker-stable fixes the following issues: Note this update contains a already fixed references mostl... 7.5 0.0222 None reported
Showing 1 to 2 of 2 1