Linux · Oracle Linux · Security advisory · June 6, 2022

ELSA-2022-9460: Security update for 103 packages

ELSA-2022-9460, released June 6, 2022, fixes 4 CVEs across 103 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0274
86th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 3 Routine 1

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-21.module+el8.5.0+20645+1693a26d
hivex-develol 80:1.3.18-21.module+el8.5.0+20645+1693a26d
libguestfsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-bash-completionol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-benchmarkingol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-develol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-gfs2ol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-gobjectol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-gobject-develol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-inspect-iconsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-javaol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-java-develol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-javadocol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-man-pages-jaol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-man-pages-ukol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-rescueol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-rsyncol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-toolsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-tools-col 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libguestfs-winsupportol 80:8.2-1.module+el8.5.0+20645+1693a26d
libguestfs-xfsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
libiscsiol 80:1.18.0-8.module+el8.5.0+20645+1693a26d
libiscsi-develol 80:1.18.0-8.module+el8.5.0+20645+1693a26d
libiscsi-utilsol 80:1.18.0-8.module+el8.5.0+20645+1693a26d
libnbdol 80:1.2.2-1.module+el8.5.0+20645+1693a26d
libnbd-develol 80:1.2.2-1.module+el8.5.0+20645+1693a26d
libvirtol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-adminol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-bash-completionol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-clientol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemonol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-config-networkol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-config-nwfilterol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-interfaceol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-networkol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-nodedevol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-nwfilterol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-qemuol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-secretol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storageol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-coreol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-diskol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-glusterol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-iscsiol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-iscsi-directol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-logicalol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-mpathol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-rbdol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-driver-storage-scsiol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-daemon-kvmol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-dbusol 80:1.3.0-2.module+el8.5.0+20645+1693a26d
libvirt-develol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-docsol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-libsol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-lock-sanlockol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
libvirt-nssol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
lua-guestfsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
nbdfuseol 80:1.2.2-1.module+el8.5.0+20645+1693a26d
nbdkitol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-develol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.5.0+20645+1693a26d
netcfol 80:0.2.8-12.module+el8.5.0+20645+1693a26d
netcf-develol 80:0.2.8-12.module+el8.5.0+20645+1693a26d
netcf-libsol 80:0.2.8-12.module+el8.5.0+20645+1693a26d
perl-Sys-Guestfsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
perl-Sys-Virtol 80:4.5.0-5.module+el8.5.0+20645+1693a26d
perl-hivexol 80:1.3.18-21.module+el8.5.0+20645+1693a26d
python3-hivexol 80:1.3.18-21.module+el8.5.0+20645+1693a26d
python3-libguestfsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
python3-libnbdol 80:1.2.2-1.module+el8.5.0+20645+1693a26d
python3-libvirtol 80:5.7.0-33.module+el8.5.0+20645+1693a26d
qemu-guest-agentol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-imgol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvmol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvm-block-curlol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvm-block-glusterol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvm-block-iscsiol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvm-block-rbdol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvm-block-sshol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvm-commonol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
qemu-kvm-coreol 815:4.2.1-17.module+el8.5.0+20645+1693a26d
ruby-hivexol 80:1.3.18-21.module+el8.5.0+20645+1693a26d
ruby-libguestfsol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
seabiosol 80:1.13.0-2.module+el8.5.0+20645+1693a26d
seabios-binol 80:1.13.0-2.module+el8.5.0+20645+1693a26d
seavgabios-binol 80:1.13.0-2.module+el8.5.0+20645+1693a26d
sgabiosol 81:0.20170427git-3.module+el8.5.0+20645+1693a26d
sgabios-binol 81:0.20170427git-3.module+el8.5.0+20645+1693a26d
superminol 80:5.1.19-10.module+el8.5.0+20645+1693a26d
supermin-develol 80:5.1.19-10.module+el8.5.0+20645+1693a26d
virt-dibol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d
virt-v2vol 81:1.40.2-28.0.4.module+el8.5.0+20645+1693a26d

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-26353 qemu-system-arm: A flaw was found in the virtio-net device of QEMU7.5 0.0274 None reported
High CVE-2021-3748 python3-libguestfs: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms8.8 0.0052 None reported
High CVE-2022-26354 qemu-system-arm: A flaw was found in the vhost-vsock device of QEMU7.5 0.0039 None reported
Routine CVE-2022-0897 nbdkit-vddk-plugin: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms5.5 0.0105 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.