Linux · Security advisory · May 22, 2024

RHSA-2024:2988: Security update for 34 packages

RHSA-2024:2988, released May 22, 2024, fixes 14 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9355
99th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 14 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.10.0-1.module+el8.10.0+21209+52deeb51
buildahRHEL 82:1.33.6-2.module+el8.10.0+21371+46937ece
buildah-testsRHEL 82:1.33.6-2.module+el8.10.0+21371+46937ece
cockpit-podmanRHEL 80:84.1-1.module+el8.10.0+21373+0d273fdf
conmonRHEL 83:2.1.10-1.module+el8.10.0+21077+98b84d8a
container-selinuxRHEL 82:2.229.0-2.module+el8.10.0+21196+3f0abbca
containernetworking-pluginsRHEL 81:1.4.0-2.module+el8.10.0+21366+f9cb49f8
containers-commonRHEL 82:1-81.module+el8.10.0+21340+c6c7475a
critRHEL 80:3.18-4.module+el8.9.0+20326+387084d0
criuRHEL 80:3.18-4.module+el8.9.0+20326+387084d0
criu-develRHEL 80:3.18-4.module+el8.9.0+20326+387084d0
criu-libsRHEL 80:3.18-4.module+el8.9.0+20326+387084d0
crunRHEL 80:1.14.3-2.module+el8.10.0+21340+c6c7475a
fuse-overlayfsRHEL 80:1.13-1.module+el8.10.0+20412+95ee28e2
libslirpRHEL 80:4.4.0-1.module+el8.9.0+20326+387084d0
libslirp-develRHEL 80:4.4.0-1.module+el8.9.0+20326+387084d0
netavarkRHEL 82:1.10.3-1.module+el8.10.0+21306+6be40ce7
oci-seccomp-bpf-hookRHEL 80:1.2.10-1.module+el8.10.0+20565+a40ba0e5
podmanRHEL 83:4.9.4-0.1.module+el8.10.0+21350+ea09fba1
podman-catatonitRHEL 83:4.9.4-0.1.module+el8.10.0+21350+ea09fba1
podman-dockerRHEL 83:4.9.4-0.1.module+el8.10.0+21350+ea09fba1
podman-gvproxyRHEL 83:4.9.4-0.1.module+el8.10.0+21350+ea09fba1
podman-pluginsRHEL 83:4.9.4-0.1.module+el8.10.0+21350+ea09fba1
podman-remoteRHEL 83:4.9.4-0.1.module+el8.10.0+21350+ea09fba1
podman-testsRHEL 83:4.9.4-0.1.module+el8.10.0+21350+ea09fba1
python3-criuRHEL 80:3.18-4.module+el8.9.0+20326+387084d0
python3-podmanRHEL 80:4.9.0-1.module+el8.10.0+21196+3f0abbca
runcRHEL 81:1.1.12-1.module+el8.10.0+21251+62b7388c
skopeoRHEL 82:1.14.3-0.1.module+el8.10.0+21251+62b7388c
skopeo-testsRHEL 82:1.14.3-0.1.module+el8.10.0+21251+62b7388c
slirp4netnsRHEL 80:1.2.3-1.module+el8.10.0+21306+6be40ce7
toolboxRHEL 80:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89
toolbox-testsRHEL 80:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89
udicaRHEL 80:0.2.6-20.module+el8.9.0+20326+387084d0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-48795 OpenSSH: Multiple issues in OpenSSH 7.5 0.9355 None reported
High CVE-2021-34558 grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB 7.5 0.0698 None reported
High CVE-2021-33198 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0337 None reported
High CVE-2022-2879 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0201 None reported
High CVE-2023-29409 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0160 None reported
High CVE-2023-39321 go-toolset: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0135 None reported
High CVE-2023-39322 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0135 None reported
High CVE-2023-45287 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.6 0.0125 None reported
High CVE-2023-39326 go-toolset: Go Toolset provides the Go programming language tools and libraries 8.6 0.0121 None reported
High CVE-2024-23650 docker: This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consump... 7.5 0.0114 None reported
High CVE-2023-39318 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0093 None reported
High CVE-2023-39319 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0091 None reported
High CVE-2018-25091 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.5 0.0059 None reported
High CVE-2023-45803 python3-urllib3: The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security... 7.5 0.0059 None reported
Showing 1 to 14 of 14 1