Linux · Security advisory · November 8, 2022

RLSA-2022:7470: Security update for 30 packages

RLSA-2022:7470, released November 8, 2022, fixes 1 CVE across 30 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8539
99th percentile

Fixed package versions

ProductReleaseFixed in
apache-commons-collectionsrocky 80:3.2.2-10.module+el8.3.0+53+ea062990
apache-commons-langrocky 80:2.6-21.module+el8.3.0+53+ea062990
apache-commons-netrocky 80:3.6-3.module+el8.3.0+53+ea062990
bea-staxrocky 80:1.2.0-16.module+el8.3.0+53+ea062990
glassfish-fastinfosetrocky 80:1.2.13-9.module+el8.3.0+53+ea062990
glassfish-jaxbrocky 80:2.2.11-11.module+el8.3.0+53+ea062990
glassfish-jaxb-apirocky 80:2.2.12-8.module+el8.3.0+53+ea062990
jackson-annotationsrocky 80:2.10.0-1.module+el8.3.0+53+ea062990
jackson-corerocky 80:2.10.0-1.module+el8.3.0+53+ea062990
jackson-databindrocky 80:2.10.0-1.module+el8.3.0+53+ea062990
jackson-jaxrs-providersrocky 80:2.9.9-1.module+el8.3.0+53+ea062990
jackson-module-jaxb-annotationsrocky 80:2.7.6-4.module+el8.3.0+53+ea062990
jakarta-commons-httpclientrocky 81:3.1-28.module+el8.3.0+53+ea062990
javassistrocky 80:3.18.1-8.module+el8.3.0+53+ea062990
jssrocky 80:4.9.4-1.module+el8.7.0+1069+6f3de942
ldapjdkrocky 80:4.23.0-1.module+el8.7.0+1069+6f3de942
pki-corerocky 80:10.12.0-4.module+el8.7.0+1069+6f3de942
python-nssrocky 80:1.0.1-10.module+el8.3.0+53+ea062990
relaxngDatatyperocky 80:2011.1-7.module+el8.3.0+53+ea062990
resteasyrocky 80:3.0.26-6.module+el8.5.0+697+f586bb30
slf4jrocky 80:1.7.25-4.module+el8.5.0+697+f586bb30
stax-exrocky 80:1.7.7-8.module+el8.3.0+53+ea062990
tomcatjssrocky 80:7.7.1-1.module+el8.6.0+788+76246f77
velocityrocky 80:1.7-24.module+el8.3.0+53+ea062990
xalan-j2rocky 80:2.7.1-38.module+el8.3.0+53+ea062990
xerces-j2rocky 80:2.11.0-34.module+el8.3.0+53+ea062990
xml-commons-apisrocky 80:1.4.01-25.module+el8.5.0+697+f586bb30
xml-commons-resolverrocky 80:1.2-26.module+el8.3.0+53+ea062990
xmlstreambufferrocky 80:1.5.4-8.module+el8.3.0+53+ea062990
xsomrocky 80:0-19.20110809svn.module+el8.3.0+53+ea062990

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-2414 idm-pki-acme: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... 7.5 0.8539 None reported
Showing 1 to 1 of 1 1