Linux · Security advisory · January 11, 2024

ELSA-2024-0133: Security update for 41 packages

ELSA-2024-0133, released January 11, 2024, fixes 2 CVEs across 41 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0136
71st percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
fence-agents-allol 80:4.2.1-121.el8_9.2
fence-agents-amt-wsol 80:4.2.1-121.el8_9.2
fence-agents-apcol 80:4.2.1-121.el8_9.2
fence-agents-apc-snmpol 80:4.2.1-121.el8_9.2
fence-agents-bladecenterol 80:4.2.1-121.el8_9.2
fence-agents-brocadeol 80:4.2.1-121.el8_9.2
fence-agents-cisco-mdsol 80:4.2.1-121.el8_9.2
fence-agents-cisco-ucsol 80:4.2.1-121.el8_9.2
fence-agents-commonol 80:4.2.1-121.el8_9.2
fence-agents-computeol 80:4.2.1-121.el8_9.2
fence-agents-drac5ol 80:4.2.1-121.el8_9.2
fence-agents-eaton-snmpol 80:4.2.1-121.el8_9.2
fence-agents-emersonol 80:4.2.1-121.el8_9.2
fence-agents-epsol 80:4.2.1-121.el8_9.2
fence-agents-heuristics-pingol 80:4.2.1-121.el8_9.2
fence-agents-hpbladeol 80:4.2.1-121.el8_9.2
fence-agents-ibm-powervsol 80:4.2.1-121.el8_9.2
fence-agents-ibm-vpcol 80:4.2.1-121.el8_9.2
fence-agents-ibmbladeol 80:4.2.1-121.el8_9.2
fence-agents-ifmibol 80:4.2.1-121.el8_9.2
fence-agents-ilo-moonshotol 80:4.2.1-121.el8_9.2
fence-agents-ilo-mpol 80:4.2.1-121.el8_9.2
fence-agents-ilo-sshol 80:4.2.1-121.el8_9.2
fence-agents-ilo2ol 80:4.2.1-121.el8_9.2
fence-agents-intelmodularol 80:4.2.1-121.el8_9.2
fence-agents-ipduol 80:4.2.1-121.el8_9.2
fence-agents-ipmilanol 80:4.2.1-121.el8_9.2
fence-agents-kdumpol 80:4.2.1-121.el8_9.2
fence-agents-kubevirtol 80:4.2.1-121.el8_9.2
fence-agents-lparol 80:4.2.1-121.el8_9.2
fence-agents-mpathol 80:4.2.1-121.el8_9.2
fence-agents-redfishol 80:4.2.1-121.el8_9.2
fence-agents-rhevmol 80:4.2.1-121.el8_9.2
fence-agents-rsaol 80:4.2.1-121.el8_9.2
fence-agents-rsbol 80:4.2.1-121.el8_9.2
fence-agents-sbdol 80:4.2.1-121.el8_9.2
fence-agents-scsiol 80:4.2.1-121.el8_9.2
fence-agents-virshol 80:4.2.1-121.el8_9.2
fence-agents-vmware-restol 80:4.2.1-121.el8_9.2
fence-agents-vmware-soapol 80:4.2.1-121.el8_9.2
fence-agents-wtiol 80:4.2.1-121.el8_9.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-43804 python-urllib3: urllib3 is a user-friendly HTTP client library for Python 8.1 0.0136 None reported
High CVE-2023-37920 ca-certificates: The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundatio... 9.8 0.0057 None reported
Showing 1 to 2 of 2 1