Linux · Security advisory · June 11, 2024

RHSA-2024:3826: Security update for 5 packages

RHSA-2024:3826, released June 11, 2024, fixes 3 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0210
81st percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
podmanRHEL 94:4.9.4-4.el9_4
podman-dockerRHEL 94:4.9.4-4.el9_4
podman-pluginsRHEL 94:4.9.4-4.el9_4
podman-remoteRHEL 94:4.9.4-4.el9_4
podman-testsRHEL 94:4.9.4-4.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-28176 containers-common: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.5 0.0210 None reported
High CVE-2023-45290 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp... 7.5 0.0117 None reported
Routine CVE-2024-28180 apptainer: This update for apptainer fixes the following issues: - Update to version 1.3.6 - CVE-2024-28180: Fixed an improper... 4.3 0.0196 None reported
Showing 1 to 3 of 3 1