Linux · Security advisory · February 14, 2024

ELSA-2024-0752: Security update for 32 packages

ELSA-2024-0752, released February 14, 2024, fixes 1 CVE across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1892
97th percentile

Fixed package versions

ProductReleaseFixed in
aardvark-dnsol 82:1.7.0-1.module+el8.9.0+90147+a4870853
buildahol 81:1.31.3-3.0.1.module+el8.9.0+90147+a4870853
buildah-testsol 81:1.31.3-3.0.1.module+el8.9.0+90147+a4870853
cockpit-podmanol 80:75-1.module+el8.9.0+90147+a4870853
conmonol 83:2.1.8-1.module+el8.9.0+90147+a4870853
container-selinuxol 82:2.221.0-1.module+el8.9.0+90147+a4870853
containernetworking-pluginsol 81:1.3.0-8.0.1.module+el8.9.0+90147+a4870853
containers-commonol 82:1-70.0.2.module+el8.9.0+90147+a4870853
critol 80:3.18-4.module+el8.9.0+90147+a4870853
criuol 80:3.18-4.module+el8.9.0+90147+a4870853
criu-develol 80:3.18-4.module+el8.9.0+90147+a4870853
criu-libsol 80:3.18-4.module+el8.9.0+90147+a4870853
crunol 80:1.8.7-1.module+el8.9.0+90147+a4870853
fuse-overlayfsol 80:1.12-1.module+el8.9.0+90147+a4870853
libslirpol 80:4.4.0-1.module+el8.9.0+90147+a4870853
libslirp-develol 80:4.4.0-1.module+el8.9.0+90147+a4870853
netavarkol 82:1.7.0-2.module+el8.9.0+90147+a4870853
oci-seccomp-bpf-hookol 80:1.2.9-1.module+el8.9.0+90147+a4870853
podmanol 83:4.6.1-8.0.1.module+el8.9.0+90147+a4870853
podman-catatonitol 83:4.6.1-8.0.1.module+el8.9.0+90147+a4870853
podman-dockerol 83:4.6.1-8.0.1.module+el8.9.0+90147+a4870853
podman-gvproxyol 83:4.6.1-8.0.1.module+el8.9.0+90147+a4870853
podman-pluginsol 83:4.6.1-8.0.1.module+el8.9.0+90147+a4870853
podman-remoteol 83:4.6.1-8.0.1.module+el8.9.0+90147+a4870853
podman-testsol 83:4.6.1-8.0.1.module+el8.9.0+90147+a4870853
python3-criuol 80:3.18-4.module+el8.9.0+90147+a4870853
python3-podmanol 80:4.6.0-2.0.1.module+el8.9.0+90147+a4870853
runcol 81:1.1.12-1.module+el8.9.0+90147+a4870853
skopeool 82:1.13.3-3.0.1.module+el8.9.0+90147+a4870853
skopeo-testsol 82:1.13.3-3.0.1.module+el8.9.0+90147+a4870853
slirp4netnsol 80:1.2.1-1.module+el8.9.0+90147+a4870853
udicaol 80:0.2.6-20.module+el8.9.0+90147+a4870853

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-21626 GitHub: CVE-2024-21626 Container breakout through process.cwd trickery and leaked fds 8.6 0.1892 None reported
Showing 1 to 1 of 1 1