Linux · Security advisory · February 8, 2024

RHSA-2024:0752: Security update for 34 packages

RHSA-2024:0752, released February 8, 2024, fixes 1 CVE across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1892
97th percentile

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.7.0-1.module+el8.9.0+21243+a586538b
buildahRHEL 81:1.31.3-3.module+el8.9.0+21243+a586538b
buildah-testsRHEL 81:1.31.3-3.module+el8.9.0+21243+a586538b
cockpit-podmanRHEL 80:75-1.module+el8.9.0+21243+a586538b
conmonRHEL 83:2.1.8-1.module+el8.9.0+21243+a586538b
container-selinuxRHEL 82:2.221.0-1.module+el8.9.0+21243+a586538b
containernetworking-pluginsRHEL 81:1.3.0-8.module+el8.9.0+21243+a586538b
containers-commonRHEL 82:1-71.module+el8.9.0+21243+a586538b
critRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
criuRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
criu-develRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
criu-libsRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
crunRHEL 80:1.8.7-1.module+el8.9.0+21243+a586538b
fuse-overlayfsRHEL 80:1.12-1.module+el8.9.0+21243+a586538b
libslirpRHEL 80:4.4.0-1.module+el8.9.0+21243+a586538b
libslirp-develRHEL 80:4.4.0-1.module+el8.9.0+21243+a586538b
netavarkRHEL 82:1.7.0-2.module+el8.9.0+21243+a586538b
oci-seccomp-bpf-hookRHEL 80:1.2.9-1.module+el8.9.0+21243+a586538b
podmanRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-catatonitRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-dockerRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-gvproxyRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-pluginsRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-remoteRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-testsRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
python3-criuRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
python3-podmanRHEL 80:4.6.0-2.module+el8.9.0+21243+a586538b
runcRHEL 81:1.1.12-1.module+el8.9.0+21243+a586538b
skopeoRHEL 82:1.13.3-3.module+el8.9.0+21243+a586538b
skopeo-testsRHEL 82:1.13.3-3.module+el8.9.0+21243+a586538b
slirp4netnsRHEL 80:1.2.1-1.module+el8.9.0+21243+a586538b
toolboxRHEL 80:0.0.99.4-5.module+el8.9.0+21243+a586538b
toolbox-testsRHEL 80:0.0.99.4-5.module+el8.9.0+21243+a586538b
udicaRHEL 80:0.2.6-20.module+el8.9.0+21243+a586538b

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-21626 GitHub: CVE-2024-21626 Container breakout through process.cwd trickery and leaked fds 8.6 0.1892 None reported
Showing 1 to 1 of 1 1