Linux · Red Hat · Security advisory · January 10, 2024

RHSA-2024:0121: Security update for 34 packages

RHSA-2024:0121, released January 10, 2024, fixes 1 CVE across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0349
89th percentile

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.0.1-38.module+el8.9.0+20656+56f336b9
buildahRHEL 81:1.24.6-7.module+el8.9.0+20656+56f336b9
buildah-testsRHEL 81:1.24.6-7.module+el8.9.0+20656+56f336b9
cockpit-podmanRHEL 80:46-1.module+el8.9.0+20656+56f336b9
conmonRHEL 82:2.1.4-2.module+el8.9.0+20656+56f336b9
container-selinuxRHEL 82:2.205.0-3.module+el8.9.0+20656+56f336b9
containernetworking-pluginsRHEL 81:1.1.1-6.module+el8.9.0+20875+8dd9d5d2
containers-commonRHEL 82:1-38.module+el8.9.0+20656+56f336b9
critRHEL 80:3.15-3.module+el8.9.0+20656+56f336b9
criuRHEL 80:3.15-3.module+el8.9.0+20656+56f336b9
criu-develRHEL 80:3.15-3.module+el8.9.0+20656+56f336b9
criu-libsRHEL 80:3.15-3.module+el8.9.0+20656+56f336b9
crunRHEL 80:1.8.7-1.module+el8.9.0+20656+56f336b9
fuse-overlayfsRHEL 80:1.9-2.module+el8.9.0+20656+56f336b9
libslirpRHEL 80:4.4.0-1.module+el8.9.0+20656+56f336b9
libslirp-develRHEL 80:4.4.0-1.module+el8.9.0+20656+56f336b9
netavarkRHEL 82:1.0.1-38.module+el8.9.0+20656+56f336b9
oci-seccomp-bpf-hookRHEL 80:1.2.5-2.module+el8.9.0+20656+56f336b9
podmanRHEL 82:4.0.2-25.module+el8.9.0+20875+8dd9d5d2
podman-catatonitRHEL 82:4.0.2-25.module+el8.9.0+20875+8dd9d5d2
podman-dockerRHEL 82:4.0.2-25.module+el8.9.0+20875+8dd9d5d2
podman-gvproxyRHEL 82:4.0.2-25.module+el8.9.0+20875+8dd9d5d2
podman-pluginsRHEL 82:4.0.2-25.module+el8.9.0+20875+8dd9d5d2
podman-remoteRHEL 82:4.0.2-25.module+el8.9.0+20875+8dd9d5d2
podman-testsRHEL 82:4.0.2-25.module+el8.9.0+20875+8dd9d5d2
python3-criuRHEL 80:3.15-3.module+el8.9.0+20656+56f336b9
python3-podmanRHEL 80:4.0.0-2.module+el8.9.0+20656+56f336b9
runcRHEL 81:1.1.5-2.module+el8.9.0+20656+56f336b9
skopeoRHEL 82:1.6.2-9.module+el8.9.0+20656+56f336b9
skopeo-testsRHEL 82:1.6.2-9.module+el8.9.0+20656+56f336b9
slirp4netnsRHEL 80:1.1.8-3.module+el8.9.0+20656+56f336b9
toolboxRHEL 80:0.0.99.4-5.module+el8.9.0+20656+56f336b9
toolbox-testsRHEL 80:0.0.99.4-5.module+el8.9.0+20656+56f336b9
udicaRHEL 80:0.2.6-4.module+el8.9.0+20656+56f336b9

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-27664 golang-1.13: In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 c...7.5 0.0349 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.