Linux · Security advisory · January 26, 2022
RLSA-2022:0290: Security update for 7 packages
RLSA-2022:0290, released January 26, 2022, fixes 4 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8060
99th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| parfait | rocky 8 | 0:0.5.4-4.module+el8.5.0+728+553fbdb8 |
| si-units | rocky 8 | 0:0.6.5-2.module+el8.3.0+214+edf13b3f |
| unit-api | rocky 8 | 0:1.0-5.module+el8.3.0+214+edf13b3f |
| uom-lib | rocky 8 | 0:1.0.1-6.module+el8.3.0+214+edf13b3f |
| uom-parent | rocky 8 | 0:1.0.3-3.module+el8.3.0+214+edf13b3f |
| uom-se | rocky 8 | 0:1.0.4-3.module+el8.3.0+214+edf13b3f |
| uom-systems | rocky 8 | 0:0.7-1.module+el8.3.0+214+edf13b3f |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-4104 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.8060 | None reported | |
| High | CVE-2022-23305 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 9.8 | 0.6654 | None reported | |
| High | CVE-2022-23302 | uom-lib-javadoc: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.6384 | None reported | |
| High | CVE-2022-23307 | parfait: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs | 8.8 | 0.5441 | None reported |
Showing 1 to 4 of 4
1