Linux · Security advisory · April 30, 2024

RHSA-2024:2549: Security update for 2 packages

RHSA-2024:2549, released April 30, 2024, fixes 2 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0196
80th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
skopeoRHEL 92:1.14.3-2.el9_4
skopeo-testsRHEL 92:1.14.3-2.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-24786 buildah: This update for buildah fixes the following issues: Update to version 1.35.4: * Bump to Buildah v1.35.4 * CVE-2024-... 7.5 0.0126 None reported
Routine CVE-2024-28180 apptainer: This update for apptainer fixes the following issues: - Update to version 1.3.6 - CVE-2024-28180: Fixed an improper... 4.3 0.0196 None reported
Showing 1 to 2 of 2 1