Linux · Security advisory · April 30, 2024

ALSA-2024:2562: Security update for 7 packages

ALSA-2024:2562, released April 30, 2024, fixes 7 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8946
99th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 6 Routine 1

Fixed package versions

ProductReleaseFixed in
go-toolsetalmalinux 91.21.9-2.el9_4
golangalmalinux 91.21.9-2.el9_4
golang-binalmalinux 91.21.9-2.el9_4
golang-docsalmalinux 91.21.9-2.el9_4
golang-miscalmalinux 91.21.9-2.el9_4
golang-srcalmalinux 91.21.9-2.el9_4
golang-testsalmalinux 91.21.9-2.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-45288 apptainer: This update for apptainer fixes the following issues: - CVE-2023-45288: Fixed unclosed connections when receiving to... 7.5 0.8946 None reported
High CVE-2024-1394 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0153 None reported
High CVE-2023-45290 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp... 7.5 0.0117 None reported
High CVE-2024-24784 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp... 7.5 0.0105 None reported
High CVE-2024-24785 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp... 7.5 0.0080 None reported
High CVE-2024-24783 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp... 7.5 0.0067 None reported
Routine CVE-2023-45289 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp... 5.3 0.0108 None reported
Showing 1 to 7 of 7 1