Linux · Security advisory · May 22, 2024

ALSA-2024:2968: Security update for 47 packages

ALSA-2024:2968, released May 22, 2024, fixes 3 CVEs across 47 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0089
59th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
fence-agents-aliyunalmalinux 84.2.1-129.el8
fence-agents-allalmalinux 84.2.1-129.el8
fence-agents-amt-wsalmalinux 84.2.1-129.el8
fence-agents-apcalmalinux 84.2.1-129.el8
fence-agents-apc-snmpalmalinux 84.2.1-129.el8
fence-agents-awsalmalinux 84.2.1-129.el8
fence-agents-azure-armalmalinux 84.2.1-129.el8
fence-agents-bladecenteralmalinux 84.2.1-129.el8
fence-agents-brocadealmalinux 84.2.1-129.el8
fence-agents-cisco-mdsalmalinux 84.2.1-129.el8
fence-agents-cisco-ucsalmalinux 84.2.1-129.el8
fence-agents-commonalmalinux 84.2.1-129.el8
fence-agents-computealmalinux 84.2.1-129.el8
fence-agents-drac5almalinux 84.2.1-129.el8
fence-agents-eaton-snmpalmalinux 84.2.1-129.el8
fence-agents-emersonalmalinux 84.2.1-129.el8
fence-agents-epsalmalinux 84.2.1-129.el8
fence-agents-gcealmalinux 84.2.1-129.el8
fence-agents-heuristics-pingalmalinux 84.2.1-129.el8
fence-agents-hpbladealmalinux 84.2.1-129.el8
fence-agents-ibm-powervsalmalinux 84.2.1-129.el8
fence-agents-ibm-vpcalmalinux 84.2.1-129.el8
fence-agents-ibmbladealmalinux 84.2.1-129.el8
fence-agents-ifmibalmalinux 84.2.1-129.el8
fence-agents-ilo-moonshotalmalinux 84.2.1-129.el8
fence-agents-ilo-mpalmalinux 84.2.1-129.el8
fence-agents-ilo-sshalmalinux 84.2.1-129.el8
fence-agents-ilo2almalinux 84.2.1-129.el8
fence-agents-intelmodularalmalinux 84.2.1-129.el8
fence-agents-ipdualmalinux 84.2.1-129.el8
fence-agents-ipmilanalmalinux 84.2.1-129.el8
fence-agents-kdumpalmalinux 84.2.1-129.el8
fence-agents-kubevirtalmalinux 84.2.1-129.el8
fence-agents-lparalmalinux 84.2.1-129.el8
fence-agents-mpathalmalinux 84.2.1-129.el8
fence-agents-openstackalmalinux 84.2.1-129.el8
fence-agents-redfishalmalinux 84.2.1-129.el8
fence-agents-rhevmalmalinux 84.2.1-129.el8
fence-agents-rsaalmalinux 84.2.1-129.el8
fence-agents-rsbalmalinux 84.2.1-129.el8
fence-agents-sbdalmalinux 84.2.1-129.el8
fence-agents-scsialmalinux 84.2.1-129.el8
fence-agents-virshalmalinux 84.2.1-129.el8
fence-agents-vmware-restalmalinux 84.2.1-129.el8
fence-agents-vmware-soapalmalinux 84.2.1-129.el8
fence-agents-wtialmalinux 84.2.1-129.el8
fence-agents-zvmalmalinux 84.2.1-129.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-22195 python-Jinja2: This update for python-Jinja2 fixes the following issues: - Fixed HTML attribute injection when passing user input a... 7.8 0.0089 None reported
High CVE-2023-45803 python3-urllib3: The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security... 7.5 0.0059 None reported
Routine CVE-2023-52323 python-aliyun-python-sdk: This update for python-aliyun-python-sdk, python-aliyun-python-sdk-aas, python-aliyun-python-sdk-acm, python-aliyun-p... 5.9 0.0062 None reported
Showing 1 to 3 of 3 1