VDB
RLSA-2022%3A7950
RLSA-2022%3A7950
PUBLISHED
CVSS 6.5 MEDIUM
Record from OSV · Published November 15, 2022
Low: Image Builder security, bug fix, and enhancement update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| osbuild | Rocky Linux:9 | 0:65-1.el9.rocky.0.1, 0.1 |
| cockpit-composer | Rocky Linux:9 | 0:41-1.el9 |
| weldr-client | Rocky Linux:9 | 35.5-4.el9, 0:35.5-4.el9 |
Risk scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Rocky Linux:9 | osbuild | 0, 0 |
| Rocky Linux:9 | cockpit-composer | 0, 0 |
| Rocky Linux:9 | weldr-client | 0, 0 |
Timeline
- Nov 15, 2022 CVE Published
- Feb 5, 2026 CVE Updated
- May 1, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln RLSA-2022%3A7950
vulnetix vdb fixes RLSA-2022%3A7950
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/RLSA-2022%253A7950/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://errata.rockylinux.org/RLSA-2022:7950 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2059869 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2060061 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2064087 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2110864 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2113814 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2118831 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2123055 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2123210 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2059870 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2062597 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2088459 report
- https://bugzilla.redhat.com/show_bug.cgi?id=2105961 report