Linux · Security advisory · September 4, 2024

ELSA-2024-6309: Security update for 41 packages

ELSA-2024-6309, released September 4, 2024, fixes 2 CVEs across 41 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0194
80th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
fence-agents-allol 80:4.2.1-129.el8_10.4
fence-agents-amt-wsol 80:4.2.1-129.el8_10.4
fence-agents-apcol 80:4.2.1-129.el8_10.4
fence-agents-apc-snmpol 80:4.2.1-129.el8_10.4
fence-agents-bladecenterol 80:4.2.1-129.el8_10.4
fence-agents-brocadeol 80:4.2.1-129.el8_10.4
fence-agents-cisco-mdsol 80:4.2.1-129.el8_10.4
fence-agents-cisco-ucsol 80:4.2.1-129.el8_10.4
fence-agents-commonol 80:4.2.1-129.el8_10.4
fence-agents-computeol 80:4.2.1-129.el8_10.4
fence-agents-drac5ol 80:4.2.1-129.el8_10.4
fence-agents-eaton-snmpol 80:4.2.1-129.el8_10.4
fence-agents-emersonol 80:4.2.1-129.el8_10.4
fence-agents-epsol 80:4.2.1-129.el8_10.4
fence-agents-heuristics-pingol 80:4.2.1-129.el8_10.4
fence-agents-hpbladeol 80:4.2.1-129.el8_10.4
fence-agents-ibm-powervsol 80:4.2.1-129.el8_10.4
fence-agents-ibm-vpcol 80:4.2.1-129.el8_10.4
fence-agents-ibmbladeol 80:4.2.1-129.el8_10.4
fence-agents-ifmibol 80:4.2.1-129.el8_10.4
fence-agents-ilo-moonshotol 80:4.2.1-129.el8_10.4
fence-agents-ilo-mpol 80:4.2.1-129.el8_10.4
fence-agents-ilo-sshol 80:4.2.1-129.el8_10.4
fence-agents-ilo2ol 80:4.2.1-129.el8_10.4
fence-agents-intelmodularol 80:4.2.1-129.el8_10.4
fence-agents-ipduol 80:4.2.1-129.el8_10.4
fence-agents-ipmilanol 80:4.2.1-129.el8_10.4
fence-agents-kdumpol 80:4.2.1-129.el8_10.4
fence-agents-kubevirtol 80:4.2.1-129.el8_10.4
fence-agents-lparol 80:4.2.1-129.el8_10.4
fence-agents-mpathol 80:4.2.1-129.el8_10.4
fence-agents-redfishol 80:4.2.1-129.el8_10.4
fence-agents-rhevmol 80:4.2.1-129.el8_10.4
fence-agents-rsaol 80:4.2.1-129.el8_10.4
fence-agents-rsbol 80:4.2.1-129.el8_10.4
fence-agents-sbdol 80:4.2.1-129.el8_10.4
fence-agents-scsiol 80:4.2.1-129.el8_10.4
fence-agents-virshol 80:4.2.1-129.el8_10.4
fence-agents-vmware-restol 80:4.2.1-129.el8_10.4
fence-agents-vmware-soapol 80:4.2.1-129.el8_10.4
fence-agents-wtiol 80:4.2.1-129.el8_10.4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-6345 fence-agents-aliyun: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices 8.8 0.0194 None reported
High CVE-2024-37891 python-urllib3: This update for python-urllib3 fixes the following issues: - CVE-2024-37891: Fixed proxy-authorization request heade... 8.8 0.0114 None reported
Showing 1 to 2 of 2 1