Linux · Security advisory · November 8, 2022

RHSA-2022:7469: Security update for 34 packages

RHSA-2022:7469, released November 8, 2022, fixes 3 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0396
90th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.0.1-35.module+el8.7.0+16520+2db5507d
buildahRHEL 81:1.24.5-2.module+el8.7.0+16520+2db5507d
buildah-testsRHEL 81:1.24.5-2.module+el8.7.0+16520+2db5507d
cockpit-podmanRHEL 80:46-1.module+el8.7.0+16520+2db5507d
conmonRHEL 82:2.1.4-1.module+el8.7.0+16520+2db5507d
container-selinuxRHEL 82:2.189.0-1.module+el8.7.0+16520+2db5507d
containernetworking-pluginsRHEL 81:1.1.1-2.module+el8.7.0+16520+2db5507d
containers-commonRHEL 82:1-35.module+el8.7.0+16520+2db5507d
critRHEL 80:3.15-3.module+el8.7.0+16520+2db5507d
criuRHEL 80:3.15-3.module+el8.7.0+16520+2db5507d
criu-develRHEL 80:3.15-3.module+el8.7.0+16520+2db5507d
criu-libsRHEL 80:3.15-3.module+el8.7.0+16520+2db5507d
crunRHEL 80:1.5-1.module+el8.7.0+16520+2db5507d
fuse-overlayfsRHEL 80:1.9-1.module+el8.7.0+16520+2db5507d
libslirpRHEL 80:4.4.0-1.module+el8.7.0+16520+2db5507d
libslirp-develRHEL 80:4.4.0-1.module+el8.7.0+16520+2db5507d
netavarkRHEL 82:1.0.1-35.module+el8.7.0+16520+2db5507d
oci-seccomp-bpf-hookRHEL 80:1.2.5-1.module+el8.7.0+16520+2db5507d
podmanRHEL 82:4.0.2-8.module+el8.7.0+16520+2db5507d
podman-catatonitRHEL 82:4.0.2-8.module+el8.7.0+16520+2db5507d
podman-dockerRHEL 82:4.0.2-8.module+el8.7.0+16520+2db5507d
podman-gvproxyRHEL 82:4.0.2-8.module+el8.7.0+16520+2db5507d
podman-pluginsRHEL 82:4.0.2-8.module+el8.7.0+16520+2db5507d
podman-remoteRHEL 82:4.0.2-8.module+el8.7.0+16520+2db5507d
podman-testsRHEL 82:4.0.2-8.module+el8.7.0+16520+2db5507d
python3-criuRHEL 80:3.15-3.module+el8.7.0+16520+2db5507d
python3-podmanRHEL 80:4.0.0-1.module+el8.7.0+16520+2db5507d
runcRHEL 81:1.1.4-1.module+el8.7.0+16520+2db5507d
skopeoRHEL 82:1.6.2-5.module+el8.7.0+16520+2db5507d
skopeo-testsRHEL 82:1.6.2-5.module+el8.7.0+16520+2db5507d
slirp4netnsRHEL 80:1.1.8-2.module+el8.7.0+16520+2db5507d
toolboxRHEL 80:0.0.99.3-0.5.module+el8.7.0+16520+2db5507d
toolbox-testsRHEL 80:0.0.99.3-0.5.module+el8.7.0+16520+2db5507d
udicaRHEL 80:0.2.6-3.module+el8.7.0+16520+2db5507d

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-27191 docker-stable: This update for docker-stable fixes the following issues: Note this update contains a already fixed references mostl... 7.5 0.0396 None reported
High CVE-2022-1708 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.5 0.0317 None reported
High CVE-2022-29162 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.8 0.0039 None reported
Showing 1 to 3 of 3 1