Linux · AlmaLinux · Security advisory · May 10, 2022

ALSA-2022:1762: Security update for 34 packages

ALSA-2022:1762, released May 10, 2022, fixes 6 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0599
93rd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsalmalinux 82:1.0.1-27.module_el8.6.0+2878+e681bc44
buildahalmalinux 81:1.24.2-4.module_el8.6.0+2878+e681bc44
buildah-testsalmalinux 81:1.24.2-4.module_el8.6.0+2878+e681bc44
cockpit-podmanalmalinux 843-1.module_el8.6.0+2877+8e437bf5
conmonalmalinux 82:2.1.0-1.module_el8.6.0+2877+8e437bf5
container-selinuxalmalinux 82:2.179.1-1.module_el8.6.0+2878+e681bc44
containernetworking-pluginsalmalinux 81:1.0.1-2.module_el8.6.0+2878+e681bc44
containers-commonalmalinux 82:1-27.module_el8.6.0+2878+e681bc44
critalmalinux 83.15-3.module_el8.6.0+2751+06427ca3
criualmalinux 83.15-3.module_el8.6.0+2877+8e437bf5
criu-develalmalinux 83.15-3.module_el8.6.0+2751+06427ca3
criu-libsalmalinux 83.15-3.module_el8.6.0+2751+06427ca3
crunalmalinux 81.4.4-1.module_el8.6.0+2877+8e437bf5
fuse-overlayfsalmalinux 81.8.2-1.module_el8.6.0+2877+8e437bf5
libslirpalmalinux 84.4.0-1.module_el8.6.0+2877+8e437bf5
libslirp-develalmalinux 84.4.0-1.module_el8.6.0+2877+8e437bf5
netavarkalmalinux 82:1.0.1-27.module_el8.6.0+2878+e681bc44
oci-seccomp-bpf-hookalmalinux 81.2.3-3.module_el8.6.0+2877+8e437bf5
podmanalmalinux 82:4.0.2-6.module_el8.6.0+2878+e681bc44
podman-catatonitalmalinux 82:4.0.2-6.module_el8.6.0+2878+e681bc44
podman-dockeralmalinux 82:4.0.2-6.module_el8.6.0+2878+e681bc44
podman-gvproxyalmalinux 82:4.0.2-6.module_el8.6.0+2878+e681bc44
podman-pluginsalmalinux 82:4.0.2-6.module_el8.6.0+2878+e681bc44
podman-remotealmalinux 82:4.0.2-6.module_el8.6.0+2878+e681bc44
podman-testsalmalinux 82:4.0.2-6.module_el8.6.0+2878+e681bc44
python3-criualmalinux 83.15-3.module_el8.6.0+2877+8e437bf5
python3-podmanalmalinux 84.0.0-1.module_el8.6.0+2877+8e437bf5
runcalmalinux 81:1.0.3-2.module_el8.6.0+2878+e681bc44
skopeoalmalinux 82:1.6.1-2.module_el8.6.0+2877+8e437bf5
skopeo-testsalmalinux 82:1.6.1-2.module_el8.6.0+2877+8e437bf5
slirp4netnsalmalinux 81.1.8-2.module_el8.6.0+2877+8e437bf5
toolboxalmalinux 80.0.99.3-0.4.module_el8.6.0+2877+8e437bf5
toolbox-testsalmalinux 80.0.99.3-0.4.module_el8.6.0+2877+8e437bf5
udicaalmalinux 80.2.6-2.module_el8.6.0+2877+8e437bf5

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-21698 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0599 None reported
High CVE-2022-1227 podman-catatonit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.8 0.0417 None reported
High CVE-2020-28851 buildah-tests: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...7.5 0.0233 None reported
High CVE-2022-27649 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0143 None reported
High CVE-2022-27651 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0126 None reported
High CVE-2022-27650 crit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0115 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.