Linux · Security advisory · May 22, 2024

RHSA-2024:2968: Security update for 47 packages

RHSA-2024:2968, released May 22, 2024, fixes 3 CVEs across 47 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0089
59th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
fence-agents-aliyunRHEL 80:4.2.1-129.el8
fence-agents-allRHEL 80:4.2.1-129.el8
fence-agents-amt-wsRHEL 80:4.2.1-129.el8
fence-agents-apcRHEL 80:4.2.1-129.el8
fence-agents-apc-snmpRHEL 80:4.2.1-129.el8
fence-agents-awsRHEL 80:4.2.1-129.el8
fence-agents-azure-armRHEL 80:4.2.1-129.el8
fence-agents-bladecenterRHEL 80:4.2.1-129.el8
fence-agents-brocadeRHEL 80:4.2.1-129.el8
fence-agents-cisco-mdsRHEL 80:4.2.1-129.el8
fence-agents-cisco-ucsRHEL 80:4.2.1-129.el8
fence-agents-commonRHEL 80:4.2.1-129.el8
fence-agents-computeRHEL 80:4.2.1-129.el8
fence-agents-drac5RHEL 80:4.2.1-129.el8
fence-agents-eaton-snmpRHEL 80:4.2.1-129.el8
fence-agents-emersonRHEL 80:4.2.1-129.el8
fence-agents-epsRHEL 80:4.2.1-129.el8
fence-agents-gceRHEL 80:4.2.1-129.el8
fence-agents-heuristics-pingRHEL 80:4.2.1-129.el8
fence-agents-hpbladeRHEL 80:4.2.1-129.el8
fence-agents-ibm-powervsRHEL 80:4.2.1-129.el8
fence-agents-ibm-vpcRHEL 80:4.2.1-129.el8
fence-agents-ibmbladeRHEL 80:4.2.1-129.el8
fence-agents-ifmibRHEL 80:4.2.1-129.el8
fence-agents-ilo-moonshotRHEL 80:4.2.1-129.el8
fence-agents-ilo-mpRHEL 80:4.2.1-129.el8
fence-agents-ilo-sshRHEL 80:4.2.1-129.el8
fence-agents-ilo2RHEL 80:4.2.1-129.el8
fence-agents-intelmodularRHEL 80:4.2.1-129.el8
fence-agents-ipduRHEL 80:4.2.1-129.el8
fence-agents-ipmilanRHEL 80:4.2.1-129.el8
fence-agents-kdumpRHEL 80:4.2.1-129.el8
fence-agents-kubevirtRHEL 80:4.2.1-129.el8
fence-agents-lparRHEL 80:4.2.1-129.el8
fence-agents-mpathRHEL 80:4.2.1-129.el8
fence-agents-openstackRHEL 80:4.2.1-129.el8
fence-agents-redfishRHEL 80:4.2.1-129.el8
fence-agents-rhevmRHEL 80:4.2.1-129.el8
fence-agents-rsaRHEL 80:4.2.1-129.el8
fence-agents-rsbRHEL 80:4.2.1-129.el8
fence-agents-sbdRHEL 80:4.2.1-129.el8
fence-agents-scsiRHEL 80:4.2.1-129.el8
fence-agents-virshRHEL 80:4.2.1-129.el8
fence-agents-vmware-restRHEL 80:4.2.1-129.el8
fence-agents-vmware-soapRHEL 80:4.2.1-129.el8
fence-agents-wtiRHEL 80:4.2.1-129.el8
fence-agents-zvmRHEL 80:4.2.1-129.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-22195 python-Jinja2: This update for python-Jinja2 fixes the following issues: - Fixed HTML attribute injection when passing user input a... 7.8 0.0089 None reported
High CVE-2023-45803 python3-urllib3: The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security... 7.5 0.0059 None reported
Routine CVE-2023-52323 python-aliyun-python-sdk: This update for python-aliyun-python-sdk, python-aliyun-python-sdk-aas, python-aliyun-python-sdk-acm, python-aliyun-p... 5.9 0.0062 None reported
Showing 1 to 3 of 3 1