ALSA-2024:5533: Security update for 2 packages

ALSA-2024:5533, released August 19, 2024, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.0194

80th percentile

Fixed package versions

Product	Release	Fixed in
python3.12-setuptools	almalinux 9	68.2.2-3.el9_4.1
python3.12-setuptools-wheel	almalinux 9	68.2.2-3.el9_4.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-6345	fence-agents-aliyun: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices	8.8	0.0194	None reported

Also fixes CVE-2024-6345

RLSA-2024:5962
Cython, PyYAML, mod_wsgi and 31 more on rocky 8
ELSA-2024-5962
python39, python39-PyMySQL, python39-cffi and 34 more on ol 8
ALSA-2024:5962
python39, python39-Cython, python39-PyMySQL and 46 more on almalinux 8
RHSA-2024:5962
python39, python39-Cython, python39-PyMySQL and 46 more on RHEL 8
RLSA-2024:6311
resource-agents on rocky 8
RLSA-2024:6309
fence-agents on rocky 8
ELSA-2024-6311
resource-agents on ol 8
ALSA-2024:6309
fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws and 44 more on almalinux 8

Vendor advisory

https://osv.dev/vulnerability/ALSA-2024:5533

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.