Linux · Red Hat · Security advisory · May 16, 2023

RHSA-2023:2802: Security update for 34 packages

RHSA-2023:2802, released May 16, 2023, fixes 13 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
13
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0608
93rd percentile

Priority of the 13 CVEs

Patch now 0 Urgent 0 High 13 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.0.1-37.module+el8.8.0+17954+9046de88
buildahRHEL 81:1.24.6-5.module+el8.8.0+18083+cd85596b
buildah-testsRHEL 81:1.24.6-5.module+el8.8.0+18083+cd85596b
cockpit-podmanRHEL 80:46-1.module+el8.8.0+17821+de1b53f1
conmonRHEL 82:2.1.4-1.module+el8.8.0+17821+de1b53f1
container-selinuxRHEL 82:2.199.0-1.module+el8.8.0+18113+8b5b6979
containernetworking-pluginsRHEL 81:1.1.1-2.module+el8.8.0+17821+de1b53f1
containers-commonRHEL 82:1-37.module+el8.8.0+17954+9046de88
critRHEL 80:3.15-3.module+el8.8.0+17821+de1b53f1
criuRHEL 80:3.15-3.module+el8.8.0+17821+de1b53f1
criu-develRHEL 80:3.15-3.module+el8.8.0+17821+de1b53f1
criu-libsRHEL 80:3.15-3.module+el8.8.0+17821+de1b53f1
crunRHEL 80:1.6-1.module+el8.8.0+17821+de1b53f1
fuse-overlayfsRHEL 80:1.9-1.module+el8.8.0+17821+de1b53f1
libslirpRHEL 80:4.4.0-1.module+el8.8.0+17821+de1b53f1
libslirp-develRHEL 80:4.4.0-1.module+el8.8.0+17821+de1b53f1
netavarkRHEL 82:1.0.1-37.module+el8.8.0+17954+9046de88
oci-seccomp-bpf-hookRHEL 80:1.2.5-2.module+el8.8.0+18083+cd85596b
podmanRHEL 82:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-catatonitRHEL 82:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-dockerRHEL 82:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-gvproxyRHEL 82:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-pluginsRHEL 82:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-remoteRHEL 82:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-testsRHEL 82:4.0.2-20.module+el8.8.0+18201+6ad7332c
python3-criuRHEL 80:3.15-3.module+el8.8.0+17821+de1b53f1
python3-podmanRHEL 80:4.0.0-1.module+el8.8.0+17821+de1b53f1
runcRHEL 81:1.1.4-1.module+el8.8.0+17821+de1b53f1
skopeoRHEL 82:1.6.2-6.module+el8.8.0+17821+de1b53f1
skopeo-testsRHEL 82:1.6.2-6.module+el8.8.0+17821+de1b53f1
slirp4netnsRHEL 80:1.1.8-2.module+el8.8.0+17821+de1b53f1
toolboxRHEL 80:0.0.99.3-7.module+el8.8.0+18115+45021590
toolbox-testsRHEL 80:0.0.99.3-7.module+el8.8.0+18115+45021590
udicaRHEL 80:0.2.6-3.module+el8.8.0+17821+de1b53f1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-41717 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0608 None reported
High CVE-2022-32189 git-lfs: Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text poi...7.5 0.0278 None reported
High CVE-2022-28131 golang-1.13-go: Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a...7.5 0.0256 None reported
High CVE-2022-30633 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0221 None reported
High CVE-2022-30630 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0219 None reported
High CVE-2022-30632 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0219 None reported
High CVE-2022-30631 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0219 None reported
High CVE-2022-30635 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0192 None reported
High CVE-2022-1705 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...7.5 0.0153 None reported
High CVE-2022-32148 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0152 None reported
High CVE-2022-1962 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0092 None reported
High CVE-2023-0778 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...7.5 0.0054 None reported
High CVE-2022-2989 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...7.5 0.0033 None reported
Showing 1 to 13 of 13 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.