Linux · Oracle Linux · Security advisory · November 15, 2022

ELSA-2022-7472: Security update for 129 packages

ELSA-2022-7472, released November 15, 2022, fixes 4 CVEs across 129 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0105
64th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 1 Routine 3

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-23.module+el8.7.0+20875+5dd40464
hivex-develol 80:1.3.18-23.module+el8.7.0+20875+5dd40464
libguestfsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-applianceol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-bash-completionol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-develol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-gfs2ol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-gobjectol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-gobject-develol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-inspect-iconsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-javaol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-java-develol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-javadocol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-man-pages-jaol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-man-pages-ukol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-rescueol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-rsyncol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-toolsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-tools-col 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libguestfs-winsupportol 80:8.6-1.module+el8.7.0+20875+5dd40464
libguestfs-xfsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
libiscsiol 80:1.18.0-8.module+el8.7.0+20875+5dd40464
libiscsi-develol 80:1.18.0-8.module+el8.7.0+20875+5dd40464
libiscsi-utilsol 80:1.18.0-8.module+el8.7.0+20875+5dd40464
libnbdol 80:1.6.0-5.module+el8.7.0+20875+5dd40464
libnbd-bash-completionol 80:1.6.0-5.module+el8.7.0+20875+5dd40464
libnbd-develol 80:1.6.0-5.module+el8.7.0+20875+5dd40464
libtpmsol 80:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+20875+5dd40464
libtpms-develol 80:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+20875+5dd40464
libvirtol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-clientol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemonol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-config-networkol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-config-nwfilterol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-interfaceol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-networkol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-nodedevol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-nwfilterol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-qemuol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-secretol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storageol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-coreol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-diskol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-glusterol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-iscsiol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-iscsi-directol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-logicalol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-mpathol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-rbdol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-driver-storage-scsiol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-daemon-kvmol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-dbusol 80:1.3.0-2.module+el8.7.0+20875+5dd40464
libvirt-develol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-docsol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-libsol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-lock-sanlockol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-nssol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
libvirt-wiresharkol 80:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
lua-guestfsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
nbdfuseol 80:1.6.0-5.module+el8.7.0+20875+5dd40464
nbdkitol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-bash-completionol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-basic-filtersol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-basic-pluginsol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-curl-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-develol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-example-pluginsol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-gzip-filterol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-gzip-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-linuxdisk-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-nbd-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-python-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-serverol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-ssh-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-tar-filterol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-tar-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-tmpdisk-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-vddk-pluginol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
nbdkit-xz-filterol 80:1.24.0-4.module+el8.7.0+20875+5dd40464
netcfol 80:0.2.8-12.module+el8.7.0+20875+5dd40464
netcf-develol 80:0.2.8-12.module+el8.7.0+20875+5dd40464
netcf-libsol 80:0.2.8-12.module+el8.7.0+20875+5dd40464
ocaml-hivexol 80:1.3.18-23.module+el8.7.0+20875+5dd40464
ocaml-hivex-develol 80:1.3.18-23.module+el8.7.0+20875+5dd40464
ocaml-libguestfsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
ocaml-libguestfs-develol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
ocaml-libnbdol 80:1.6.0-5.module+el8.7.0+20875+5dd40464
ocaml-libnbd-develol 80:1.6.0-5.module+el8.7.0+20875+5dd40464
perl-Sys-Guestfsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
perl-Sys-Virtol 80:8.0.0-1.module+el8.7.0+20875+5dd40464
perl-hivexol 80:1.3.18-23.module+el8.7.0+20875+5dd40464
python3-hivexol 80:1.3.18-23.module+el8.7.0+20875+5dd40464
python3-libguestfsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
python3-libnbdol 80:1.6.0-5.module+el8.7.0+20875+5dd40464
python3-libvirtol 80:8.0.0-2.module+el8.7.0+20875+5dd40464
qemu-guest-agentol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-imgol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvmol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-block-curlol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-block-glusterol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-block-iscsiol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-block-rbdol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-block-sshol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-commonol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-coreol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-docsol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-hw-usbredirol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-testsol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-ui-openglol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
qemu-kvm-ui-spiceol 815:6.2.0-20.module+el8.7.0+20875+5dd40464.1
ruby-hivexol 80:1.3.18-23.module+el8.7.0+20875+5dd40464
ruby-libguestfsol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
seabiosol 80:1.16.0-3.module+el8.7.0+20875+5dd40464
seabios-binol 80:1.16.0-3.module+el8.7.0+20875+5dd40464
seavgabios-binol 80:1.16.0-3.module+el8.7.0+20875+5dd40464
sgabiosol 81:0.20170427git-3.module+el8.7.0+20875+5dd40464
sgabios-binol 81:0.20170427git-3.module+el8.7.0+20875+5dd40464
superminol 80:5.2.1-2.module+el8.7.0+20875+5dd40464
supermin-develol 80:5.2.1-2.module+el8.7.0+20875+5dd40464
swtpmol 80:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
swtpm-develol 80:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
swtpm-libsol 80:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
swtpm-toolsol 80:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
swtpm-tools-pkcs11ol 80:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
virt-dibol 81:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
virt-v2vol 81:1.42.0-21.module+el8.7.0+20875+5dd40464
virt-v2v-bash-completionol 81:1.42.0-21.module+el8.7.0+20875+5dd40464
virt-v2v-man-pages-jaol 81:1.42.0-21.module+el8.7.0+20875+5dd40464
virt-v2v-man-pages-ukol 81:1.42.0-21.module+el8.7.0+20875+5dd40464

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3507 qemu-block-extra: A heap buffer overflow was found in the floppy disk emulator of QEMU up to6.0.0 (including)7.5 0.0049 None reported
Routine CVE-2022-0897 nbdkit-vddk-plugin: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms5.5 0.0105 None reported
Routine CVE-2022-2211 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0097 None reported
Routine CVE-2022-23645 netcf: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms5.5 0.0040 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.