Linux · Security advisory · January 10, 2024

ALSA-2024:0121: Security update for 34 packages

ALSA-2024:0121, released January 10, 2024, fixes 7 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0349
89th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsalmalinux 82:1.0.1-38.module_el8.9.0+3627+db8ec155
buildahalmalinux 81:1.24.6-7.module_el8.9.0+3627+db8ec155
buildah-testsalmalinux 81:1.24.6-7.module_el8.9.0+3627+db8ec155
cockpit-podmanalmalinux 846-1.module_el8.7.0+3344+5bcd850f
conmonalmalinux 82:2.1.4-2.module_el8.9.0+3627+db8ec155
container-selinuxalmalinux 82:2.205.0-3.module_el8.9.0+3627+db8ec155
containernetworking-pluginsalmalinux 81:1.1.1-6.module_el8.9.0+3711+04fcca5e
containers-commonalmalinux 82:1-38.module_el8.9.0+3627+db8ec155
critalmalinux 83.15-3.module_el8.6.0+3137+d33c3efb
criualmalinux 83.15-3.module_el8.6.0+2877+8e437bf5
criu-develalmalinux 83.15-3.module_el8.6.0+2877+8e437bf5
criu-libsalmalinux 83.15-3.module_el8.6.0+2877+8e437bf5
crunalmalinux 81.8.7-1.module_el8.9.0+3683+33eb0feb
fuse-overlayfsalmalinux 81.9-2.module_el8.9.0+3627+db8ec155
libslirpalmalinux 84.4.0-1.module_el8.6.0+2877+8e437bf5
libslirp-develalmalinux 84.4.0-1.module_el8.6.0+3137+d33c3efb
netavarkalmalinux 82:1.0.1-38.module_el8.9.0+3627+db8ec155
oci-seccomp-bpf-hookalmalinux 81.2.5-2.module_el8.8.0+3468+16b86c82
podmanalmalinux 82:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1
podman-catatonitalmalinux 82:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1
podman-dockeralmalinux 82:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1
podman-gvproxyalmalinux 82:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1
podman-pluginsalmalinux 82:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1
podman-remotealmalinux 82:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1
podman-testsalmalinux 82:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1
python3-criualmalinux 83.15-3.module_el8.6.0+3137+d33c3efb
python3-podmanalmalinux 84.0.0-2.module_el8.9.0+3711+04fcca5e
runcalmalinux 81:1.1.5-2.module_el8.9.0+3627+db8ec155
skopeoalmalinux 82:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1
skopeo-testsalmalinux 82:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1
slirp4netnsalmalinux 81.1.8-3.module_el8.9.0+3627+db8ec155
toolboxalmalinux 80.0.99.4-5.module_el8.9.0+3627+db8ec155
toolbox-testsalmalinux 80.0.99.4-5.module_el8.9.0+3627+db8ec155
udicaalmalinux 80.2.6-4.module_el8.9.0+3627+db8ec155

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-27664 golang-1.13: In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 c... 7.5 0.0349 None reported
High CVE-2022-2879 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0201 None reported
High CVE-2023-29409 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0160 None reported
High CVE-2023-39321 go-toolset: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0135 None reported
High CVE-2023-39322 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0135 None reported
High CVE-2023-39318 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0093 None reported
High CVE-2023-39319 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0091 None reported
Showing 1 to 7 of 7 1