RHSA-2022:7188: Important: device-mapper-multipath security update

First published: Tue Oct 25 2022(Updated: )

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.<br>Security Fix(es):<br><li> device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software	Affected Version	How to fix
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-debugsource	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-libs	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-libs-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/kpartx	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/kpartx-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/libdmmp	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/libdmmp-debuginfo	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7	0.8.3-3.el8_2.7
redhat/device-mapper-multipath-devel	<0.8.3-3.el8_2.7.aa	0.8.3-3.el8_2.7.aa

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2022:7188 (Advisory)

agent/type
agent/severity
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/references
agent/remedy
agent/title
agent/description
agent/tags
agent/event
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2022:7188
agent/software-canonical-lookup
package-manager/redhat

RHSA-2022:7188: Important: device-mapper-multipath security update

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact