Linux · Oracle Linux · Security advisory · May 17, 2022

ELSA-2022-1759: Security update for 129 packages

ELSA-2022-1759, released May 17, 2022, fixes 29 CVEs across 129 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
29
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0495
92nd percentile

Priority of the 29 CVEs

Patch now 0 Urgent 0 High 29 Routine 0

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
hivex-develol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-applianceol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-bash-completionol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-develol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-gfs2ol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-gobjectol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-gobject-develol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-inspect-iconsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-javaol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-java-develol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-javadocol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-man-pages-jaol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-man-pages-ukol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-rescueol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-rsyncol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-toolsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-tools-col 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libguestfs-winsupportol 80:8.6-1.module+el8.6.0+20659+3dcf7c70
libguestfs-xfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libiscsiol 80:1.18.0-8.module+el8.6.0+20659+3dcf7c70
libiscsi-develol 80:1.18.0-8.module+el8.6.0+20659+3dcf7c70
libiscsi-utilsol 80:1.18.0-8.module+el8.6.0+20659+3dcf7c70
libnbdol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
libnbd-bash-completionol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
libnbd-develol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
libtpmsol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+20659+3dcf7c70
libtpms-develol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+20659+3dcf7c70
libvirtol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-clientol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemonol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-config-networkol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-config-nwfilterol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-interfaceol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-networkol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-nodedevol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-nwfilterol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-qemuol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-secretol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storageol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-coreol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-diskol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-glusterol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-iscsiol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-iscsi-directol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-logicalol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-mpathol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-rbdol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-driver-storage-scsiol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-daemon-kvmol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-dbusol 80:1.3.0-2.module+el8.6.0+20659+3dcf7c70
libvirt-develol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-docsol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-libsol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-lock-sanlockol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-nssol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
libvirt-wiresharkol 80:8.0.0-5.0.1.module+el8.6.0+20659+3dcf7c70
lua-guestfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
nbdfuseol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
nbdkitol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-bash-completionol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-basic-filtersol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-basic-pluginsol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-curl-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-develol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-example-pluginsol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-gzip-filterol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-gzip-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-linuxdisk-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-nbd-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-python-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-serverol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-ssh-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-tar-filterol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-tar-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-tmpdisk-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-vddk-pluginol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
nbdkit-xz-filterol 80:1.24.0-4.module+el8.6.0+20659+3dcf7c70
netcfol 80:0.2.8-12.module+el8.6.0+20659+3dcf7c70
netcf-develol 80:0.2.8-12.module+el8.6.0+20659+3dcf7c70
netcf-libsol 80:0.2.8-12.module+el8.6.0+20659+3dcf7c70
ocaml-hivexol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
ocaml-hivex-develol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
ocaml-libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
ocaml-libguestfs-develol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
ocaml-libnbdol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
ocaml-libnbd-develol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
perl-Sys-Guestfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
perl-Sys-Virtol 80:8.0.0-1.module+el8.6.0+20659+3dcf7c70
perl-hivexol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
python3-hivexol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
python3-libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
python3-libnbdol 80:1.6.0-5.module+el8.6.0+20664+3dcf7c70
python3-libvirtol 80:8.0.0-1.module+el8.6.0+20659+3dcf7c70
qemu-guest-agentol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-imgol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvmol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-block-curlol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-block-glusterol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-block-iscsiol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-block-rbdol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-block-sshol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-commonol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-coreol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-docsol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-hw-usbredirol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-testsol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-ui-openglol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
qemu-kvm-ui-spiceol 815:6.2.0-11.module+el8.6.0+20659+3dcf7c70
ruby-hivexol 80:1.3.18-23.module+el8.6.0+20659+3dcf7c70
ruby-libguestfsol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
seabiosol 80:1.15.0-2.module+el8.6.0+20659+3dcf7c70
seabios-binol 80:1.15.0-2.module+el8.6.0+20659+3dcf7c70
seavgabios-binol 80:1.15.0-2.module+el8.6.0+20659+3dcf7c70
sgabiosol 81:0.20170427git-3.module+el8.6.0+20659+3dcf7c70
sgabios-binol 81:0.20170427git-3.module+el8.6.0+20659+3dcf7c70
superminol 80:5.2.1-1.module+el8.6.0+20659+3dcf7c70
supermin-develol 80:5.2.1-1.module+el8.6.0+20659+3dcf7c70
swtpmol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-develol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-libsol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-toolsol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
swtpm-tools-pkcs11ol 80:0.7.0-1.20211109gitb79fd91.module+el8.6.0+20659+3dcf7c70
virt-dibol 81:1.44.0-5.0.1.module+el8.6.0+20659+3dcf7c70
virt-v2vol 81:1.42.0-18.0.1.module+el8.6.0+20659+3dcf7c70
virt-v2v-bash-completionol 81:1.42.0-18.0.1.module+el8.6.0+20659+3dcf7c70
virt-v2v-man-pages-jaol 81:1.42.0-18.0.1.module+el8.6.0+20659+3dcf7c70
virt-v2v-man-pages-ukol 81:1.42.0-18.0.1.module+el8.6.0+20659+3dcf7c70

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3622 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0495 None reported
High CVE-2021-3975 qemu-kvm-docs: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0164 None reported
High CVE-2022-0485 libvirt-dbus: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0104 None reported
High CVE-2021-3716 nbdkit-bash-completion: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0058 None reported
High CVE-2021-3748 python3-libguestfs: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms8.8 0.0052 None reported
High CVE-2021-33289 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0049 None reported
High CVE-2021-35266 libguestfs-bash-completion: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0049 None reported
High CVE-2021-35267 virt-v2v-man-pages-ja: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0049 None reported
High CVE-2021-20196 qemu-block-extra: A NULL pointer dereference flaw was found in the floppy disk emulator ofQEMU7.8 0.0048 None reported
High CVE-2021-35269 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0048 None reported
High CVE-2021-35268 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0047 None reported
High CVE-2021-33286 libvirt: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0046 None reported
High CVE-2021-39256 libvirt-nss: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0044 None reported
High CVE-2021-39254 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0044 None reported
High CVE-2021-39261 libvirt-daemon-driver-storage-iscsi-direct: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0043 None reported
High CVE-2021-39263 qemu-kvm-block-gluster: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0043 None reported
High CVE-2021-39252 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0043 None reported
High CVE-2021-39253 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0042 None reported
High CVE-2021-39260 libvirt-daemon-driver-storage-iscsi-direct: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0042 None reported
High CVE-2021-39262 libtpms: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0042 None reported
High CVE-2021-39251 libguestfs-javadoc: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0042 None reported
High CVE-2021-33285 libvirt-daemon-driver-qemu: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0042 None reported
High CVE-2021-33287 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0041 None reported
High CVE-2021-39255 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0040 None reported
High CVE-2021-39258 nbdkit-basic-plugins: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0040 None reported
Showing 1 to 25 of 29 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.