Lucene search

K
oraclelinuxOracleLinuxELSA-2022-7959
HistoryNov 22, 2022 - 12:00 a.m.

guestfs-tools security, bug fix, and enhancement update

2022-11-2200:00:00
linux.oracle.com
8

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

14.0%

[1.48.2-5]

  • Rebase to guestfs-tools 1.48.2
    resolves: rhbz#2059286
  • Default to --selinux-relabel in various tools
    resolves: rhbz#2075718, rhbz#2089748
  • Add lvm system.devices cleanup operation to virt-sysprep
    resolves: rhbz#2072493
  • Refactor virt-customize --install, --update options in common submodule
  • Add support for Clevis & Tang
    resolves: rhbz#1809453
  • Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102721
  • Fix virt-sysprep and LUKS-on-LVM guests
    resolves: rhbz#2106286

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

14.0%