Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update batch#4 (oVirt-4.5.3-4)

Fixed packages 2

Vulnerabilities 3

• Critical 9.8
  CVE-2022-47629

  Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

  libksba libksba libksba libksba Debian Ubuntu Azure Linux Alpine
  Dec 20, 2022
• High 7.8
  CVE-2022-4139

  An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memo…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jan 27, 2023
• High 7.8
  CVE-2023-22809 Public exploit EPSS 55%

  In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environme…

  sudo sudo sudo sudo Debian Ubuntu Azure Linux Alpine
  Jan 18, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2147572
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2161142
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2161571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2169971
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0859.json
• report
  https://access.redhat.com/security/cve/CVE-2022-4139
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4139
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4139
• article
  https://www.openwall.com/lists/oss-security/2022/11/30/1
• report
  https://access.redhat.com/security/cve/CVE-2022-47629
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-47629
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-47629
• article
  https://gnupg.org/blog/20221017-pepe-left-the-ksba.html
• report
  https://access.redhat.com/security/cve/CVE-2023-22809
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-22809
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-22809
• article
  https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_12p2
• article
  https://www.sudo.ws/security/advisories/sudoedit_any/