Linux · Oracle Linux · Security advisory · March 17, 2023

ELSA-2023-12195: Security update for 119 packages

ELSA-2023-12195, released March 17, 2023, fixes 4 CVEs across 119 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0156
75th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 2 Routine 2

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-23.module+el8.7.0+20916+50473d5a
hivex-develol 80:1.3.18-23.module+el8.7.0+20916+50473d5a
libguestfsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-applianceol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-bash-completionol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-develol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-gfs2ol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-gobjectol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-gobject-develol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-inspect-iconsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-javaol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-java-develol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-javadocol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-man-pages-jaol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-man-pages-ukol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-rescueol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-rsyncol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-toolsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-tools-col 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libguestfs-winsupportol 80:8.6-1.module+el8.7.0+20916+50473d5a
libguestfs-xfsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
libiscsiol 80:1.18.0-8.module+el8.7.0+20916+50473d5a
libiscsi-develol 80:1.18.0-8.module+el8.7.0+20916+50473d5a
libiscsi-utilsol 80:1.18.0-8.module+el8.7.0+20916+50473d5a
libnbdol 80:1.6.0-5.module+el8.7.0+20916+50473d5a
libnbd-bash-completionol 80:1.6.0-5.module+el8.7.0+20916+50473d5a
libnbd-develol 80:1.6.0-5.module+el8.7.0+20916+50473d5a
libtpmsol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.7.0+20916+50473d5a
libtpms-develol 80:0.9.1-0.20211126git1ff6fe1f43.module+el8.7.0+20916+50473d5a
libvirtol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-clientol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemonol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-config-networkol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-config-nwfilterol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-interfaceol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-networkol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-nodedevol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-nwfilterol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-qemuol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-secretol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storageol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-coreol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-diskol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-glusterol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-iscsiol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-iscsi-directol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-logicalol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-mpathol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-rbdol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-driver-storage-scsiol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-daemon-kvmol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-dbusol 80:1.3.0-2.module+el8.7.0+20916+50473d5a
libvirt-develol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-docsol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-libsol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-lock-sanlockol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-nssol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
libvirt-wiresharkol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
lua-guestfsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
nbdfuseol 80:1.6.0-5.module+el8.7.0+20916+50473d5a
nbdkitol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-bash-completionol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-basic-filtersol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-basic-pluginsol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-curl-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-develol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-example-pluginsol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-gzip-filterol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-gzip-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-linuxdisk-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-nbd-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-python-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-serverol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-ssh-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-tar-filterol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-tar-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-tmpdisk-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-vddk-pluginol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
nbdkit-xz-filterol 80:1.24.0-4.module+el8.7.0+20916+50473d5a
netcfol 80:0.2.8-12.module+el8.7.0+20916+50473d5a
netcf-develol 80:0.2.8-12.module+el8.7.0+20916+50473d5a
netcf-libsol 80:0.2.8-12.module+el8.7.0+20916+50473d5a
perl-Sys-Guestfsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
perl-Sys-Virtol 80:6.0.0-1.module+el8.7.0+20916+50473d5a
perl-hivexol 80:1.3.18-23.module+el8.7.0+20916+50473d5a
python3-hivexol 80:1.3.18-23.module+el8.7.0+20916+50473d5a
python3-libguestfsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
python3-libnbdol 80:1.6.0-5.module+el8.7.0+20916+50473d5a
python3-libvirtol 80:7.10.0-2.module+el8.7.0+20916+50473d5a
qemu-guest-agentol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-imgol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvmol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvm-block-curlol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvm-block-glusterol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvm-block-iscsiol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvm-block-rbdol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvm-block-sshol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvm-commonol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-kvm-coreol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
qemu-virtiofsdol 815:6.1.1-5.module+el8.7.0+20916+50473d5a
ruby-hivexol 80:1.3.18-23.module+el8.7.0+20916+50473d5a
ruby-libguestfsol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
seabiosol 80:1.15.0-2.module+el8.7.0+20916+50473d5a
seabios-binol 80:1.15.0-2.module+el8.7.0+20916+50473d5a
seavgabios-binol 80:1.15.0-2.module+el8.7.0+20916+50473d5a
sgabiosol 81:0.20170427git-3.module+el8.7.0+20916+50473d5a
sgabios-binol 81:0.20170427git-3.module+el8.7.0+20916+50473d5a
superminol 80:5.2.1-1.module+el8.7.0+20916+50473d5a
supermin-develol 80:5.2.1-1.module+el8.7.0+20916+50473d5a
swtpmol 80:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
swtpm-develol 80:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
swtpm-libsol 80:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
swtpm-toolsol 80:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
swtpm-tools-pkcs11ol 80:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
virt-dibol 81:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
virt-v2vol 81:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a
virt-v2v-bash-completionol 81:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a
virt-v2v-man-pages-jaol 81:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a
virt-v2v-man-pages-ukol 81:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-3165 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0156 None reported
High CVE-2022-1050 qemu: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device8.8 0.0038 None reported
Routine CVE-2022-4172 qemu-guest-agent: Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures6.5 0.0040 None reported
Routine CVE-2022-4144 qemu-kvm-ui-opengl: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0030 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.