Linux · Rocky Linux · Security advisory · November 8, 2022

RLSA-2022:7470: Security update for 30 packages

RLSA-2022:7470, released November 8, 2022, fixes 1 CVE across 30 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.8539
99th percentile

Fixed package versions

ProductReleaseFixed in
apache-commons-collectionsrocky 80:3.2.2-10.module+el8.3.0+53+ea062990
apache-commons-langrocky 80:2.6-21.module+el8.3.0+53+ea062990
apache-commons-netrocky 80:3.6-3.module+el8.3.0+53+ea062990
bea-staxrocky 80:1.2.0-16.module+el8.3.0+53+ea062990
glassfish-fastinfosetrocky 80:1.2.13-9.module+el8.3.0+53+ea062990
glassfish-jaxbrocky 80:2.2.11-11.module+el8.3.0+53+ea062990
glassfish-jaxb-apirocky 80:2.2.12-8.module+el8.3.0+53+ea062990
jackson-annotationsrocky 80:2.10.0-1.module+el8.3.0+53+ea062990
jackson-corerocky 80:2.10.0-1.module+el8.3.0+53+ea062990
jackson-databindrocky 80:2.10.0-1.module+el8.3.0+53+ea062990
jackson-jaxrs-providersrocky 80:2.9.9-1.module+el8.3.0+53+ea062990
jackson-module-jaxb-annotationsrocky 80:2.7.6-4.module+el8.3.0+53+ea062990
jakarta-commons-httpclientrocky 81:3.1-28.module+el8.3.0+53+ea062990
javassistrocky 80:3.18.1-8.module+el8.3.0+53+ea062990
jssrocky 80:4.9.4-1.module+el8.7.0+1069+6f3de942
ldapjdkrocky 80:4.23.0-1.module+el8.7.0+1069+6f3de942
pki-corerocky 80:10.12.0-4.module+el8.7.0+1069+6f3de942
python-nssrocky 80:1.0.1-10.module+el8.3.0+53+ea062990
relaxngDatatyperocky 80:2011.1-7.module+el8.3.0+53+ea062990
resteasyrocky 80:3.0.26-6.module+el8.5.0+697+f586bb30
slf4jrocky 80:1.7.25-4.module+el8.5.0+697+f586bb30
stax-exrocky 80:1.7.7-8.module+el8.3.0+53+ea062990
tomcatjssrocky 80:7.7.1-1.module+el8.6.0+788+76246f77
velocityrocky 80:1.7-24.module+el8.3.0+53+ea062990
xalan-j2rocky 80:2.7.1-38.module+el8.3.0+53+ea062990
xerces-j2rocky 80:2.11.0-34.module+el8.3.0+53+ea062990
xml-commons-apisrocky 80:1.4.01-25.module+el8.5.0+697+f586bb30
xml-commons-resolverrocky 80:1.2-26.module+el8.3.0+53+ea062990
xmlstreambufferrocky 80:1.5.4-8.module+el8.3.0+53+ea062990
xsomrocky 80:0-19.20110809svn.module+el8.3.0+53+ea062990

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-2414 idm-pki-acme: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...7.5 0.8539 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.