Linux · Oracle Linux · Security advisory · August 8, 2022

ELSA-2022-9700: Security update for 103 packages

ELSA-2022-9700, released August 8, 2022, fixes 4 CVEs across 103 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0164
76th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-21.module+el8.6.0+20690+93de6acb
hivex-develol 80:1.3.18-21.module+el8.6.0+20690+93de6acb
libguestfsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-bash-completionol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-benchmarkingol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-develol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-gfs2ol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-gobjectol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-gobject-develol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-inspect-iconsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-javaol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-java-develol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-javadocol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-man-pages-jaol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-man-pages-ukol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-rescueol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-rsyncol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-toolsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-tools-col 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libguestfs-winsupportol 80:8.2-1.module+el8.6.0+20690+93de6acb
libguestfs-xfsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
libiscsiol 80:1.18.0-8.module+el8.6.0+20690+93de6acb
libiscsi-develol 80:1.18.0-8.module+el8.6.0+20690+93de6acb
libiscsi-utilsol 80:1.18.0-8.module+el8.6.0+20690+93de6acb
libnbdol 80:1.2.2-1.module+el8.6.0+20690+93de6acb
libnbd-develol 80:1.2.2-1.module+el8.6.0+20690+93de6acb
libvirtol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-adminol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-bash-completionol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-clientol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemonol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-config-networkol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-config-nwfilterol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-interfaceol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-networkol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-nodedevol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-nwfilterol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-qemuol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-secretol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storageol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-coreol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-diskol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-glusterol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-iscsiol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-iscsi-directol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-logicalol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-mpathol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-rbdol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-driver-storage-scsiol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-daemon-kvmol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-dbusol 80:1.3.0-2.module+el8.6.0+20690+93de6acb
libvirt-develol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-docsol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-libsol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-lock-sanlockol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
libvirt-nssol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
lua-guestfsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
nbdfuseol 80:1.2.2-1.module+el8.6.0+20690+93de6acb
nbdkitol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-develol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
netcfol 80:0.2.8-12.module+el8.6.0+20690+93de6acb
netcf-develol 80:0.2.8-12.module+el8.6.0+20690+93de6acb
netcf-libsol 80:0.2.8-12.module+el8.6.0+20690+93de6acb
perl-Sys-Guestfsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
perl-Sys-Virtol 80:4.5.0-5.module+el8.6.0+20690+93de6acb
perl-hivexol 80:1.3.18-21.module+el8.6.0+20690+93de6acb
python3-hivexol 80:1.3.18-21.module+el8.6.0+20690+93de6acb
python3-libguestfsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
python3-libnbdol 80:1.2.2-1.module+el8.6.0+20690+93de6acb
python3-libvirtol 80:5.7.0-34.module+el8.6.0+20690+93de6acb
qemu-guest-agentol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-imgol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvmol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvm-block-curlol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvm-block-glusterol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvm-block-iscsiol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvm-block-rbdol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvm-block-sshol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvm-commonol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
qemu-kvm-coreol 815:4.2.1-18.module+el8.6.0+20690+93de6acb
ruby-hivexol 80:1.3.18-21.module+el8.6.0+20690+93de6acb
ruby-libguestfsol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
seabiosol 80:1.13.0-2.module+el8.6.0+20690+93de6acb
seabios-binol 80:1.13.0-2.module+el8.6.0+20690+93de6acb
seavgabios-binol 80:1.13.0-2.module+el8.6.0+20690+93de6acb
sgabiosol 81:0.20170427git-3.module+el8.6.0+20690+93de6acb
sgabios-binol 81:0.20170427git-3.module+el8.6.0+20690+93de6acb
superminol 80:5.1.19-10.module+el8.6.0+20690+93de6acb
supermin-develol 80:5.1.19-10.module+el8.6.0+20690+93de6acb
virt-dibol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
virt-v2vol 81:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3975 qemu-kvm-docs: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0164 None reported
High CVE-2021-4206 qemu-block-extra: A flaw was found in the QXL display device emulation in QEMU8.2 0.0083 None reported
High CVE-2021-3507 qemu-block-extra: A heap buffer overflow was found in the floppy disk emulator of QEMU up to6.0.0 (including)7.5 0.0049 None reported
High CVE-2021-4207 qemu-block-extra: A flaw was found in the QXL display device emulation in QEMU8.8 0.0040 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.