Linux · Red Hat · Security advisory · May 10, 2022

RHSA-2022:1762: Security update for 34 packages

RHSA-2022:1762, released May 10, 2022, fixes 6 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0599
93rd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.0.1-27.module+el8.6.0+14673+621cb8be
buildahRHEL 81:1.24.2-4.module+el8.6.0+14673+621cb8be
buildah-testsRHEL 81:1.24.2-4.module+el8.6.0+14673+621cb8be
cockpit-podmanRHEL 80:43-1.module+el8.6.0+14673+621cb8be
conmonRHEL 82:2.1.0-1.module+el8.6.0+14673+621cb8be
container-selinuxRHEL 82:2.179.1-1.module+el8.6.0+14673+621cb8be
containernetworking-pluginsRHEL 81:1.0.1-2.module+el8.6.0+14673+621cb8be
containers-commonRHEL 82:1-27.module+el8.6.0+14673+621cb8be
critRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
criuRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
criu-develRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
criu-libsRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
crunRHEL 80:1.4.4-1.module+el8.6.0+14673+621cb8be
fuse-overlayfsRHEL 80:1.8.2-1.module+el8.6.0+14673+621cb8be
libslirpRHEL 80:4.4.0-1.module+el8.6.0+14673+621cb8be
libslirp-develRHEL 80:4.4.0-1.module+el8.6.0+14673+621cb8be
netavarkRHEL 82:1.0.1-27.module+el8.6.0+14673+621cb8be
oci-seccomp-bpf-hookRHEL 80:1.2.3-3.module+el8.6.0+14673+621cb8be
podmanRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-catatonitRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-dockerRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-gvproxyRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-pluginsRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-remoteRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
podman-testsRHEL 82:4.0.2-6.module+el8.6.0+14673+621cb8be
python3-criuRHEL 80:3.15-3.module+el8.6.0+14673+621cb8be
python3-podmanRHEL 80:4.0.0-1.module+el8.6.0+14673+621cb8be
runcRHEL 81:1.0.3-2.module+el8.6.0+14673+621cb8be
skopeoRHEL 82:1.6.1-2.module+el8.6.0+14673+621cb8be
skopeo-testsRHEL 82:1.6.1-2.module+el8.6.0+14673+621cb8be
slirp4netnsRHEL 80:1.1.8-2.module+el8.6.0+14673+621cb8be
toolboxRHEL 80:0.0.99.3-0.4.module+el8.6.0+14673+621cb8be
toolbox-testsRHEL 80:0.0.99.3-0.4.module+el8.6.0+14673+621cb8be
udicaRHEL 80:0.2.6-2.module+el8.6.0+14673+621cb8be

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-21698 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0599 None reported
High CVE-2022-1227 podman-catatonit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.8 0.0417 None reported
High CVE-2020-28851 buildah-tests: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...7.5 0.0233 None reported
High CVE-2022-27649 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0143 None reported
High CVE-2022-27651 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0126 None reported
High CVE-2022-27650 crit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...8.0 0.0115 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.