Linux · Security advisory · August 13, 2024

RHSA-2024:5258: Security update for 34 packages

RHSA-2024:5258, released August 13, 2024, fixes 6 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0153
74th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 5 Routine 1

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.10.0-1.module+el8.10.0+22202+761b9a65
buildahRHEL 82:1.33.8-4.module+el8.10.0+22202+761b9a65
buildah-testsRHEL 82:1.33.8-4.module+el8.10.0+22202+761b9a65
cockpit-podmanRHEL 80:84.1-1.module+el8.10.0+22202+761b9a65
conmonRHEL 83:2.1.10-1.module+el8.10.0+22202+761b9a65
container-selinuxRHEL 82:2.229.0-2.module+el8.10.0+22202+761b9a65
containernetworking-pluginsRHEL 81:1.4.0-5.module+el8.10.0+22202+761b9a65
containers-commonRHEL 82:1-82.module+el8.10.0+22202+761b9a65
critRHEL 80:3.18-5.module+el8.10.0+22202+761b9a65
criuRHEL 80:3.18-5.module+el8.10.0+22202+761b9a65
criu-develRHEL 80:3.18-5.module+el8.10.0+22202+761b9a65
criu-libsRHEL 80:3.18-5.module+el8.10.0+22202+761b9a65
crunRHEL 80:1.14.3-2.module+el8.10.0+22202+761b9a65
fuse-overlayfsRHEL 80:1.13-1.module+el8.10.0+22202+761b9a65
libslirpRHEL 80:4.4.0-2.module+el8.10.0+22202+761b9a65
libslirp-develRHEL 80:4.4.0-2.module+el8.10.0+22202+761b9a65
netavarkRHEL 82:1.10.3-1.module+el8.10.0+22202+761b9a65
oci-seccomp-bpf-hookRHEL 80:1.2.10-1.module+el8.10.0+22202+761b9a65
podmanRHEL 84:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-catatonitRHEL 84:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-dockerRHEL 84:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-gvproxyRHEL 84:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-pluginsRHEL 84:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-remoteRHEL 84:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-testsRHEL 84:4.9.4-12.module+el8.10.0+22202+761b9a65
python3-criuRHEL 80:3.18-5.module+el8.10.0+22202+761b9a65
python3-podmanRHEL 80:4.9.0-2.module+el8.10.0+22202+761b9a65
runcRHEL 81:1.1.12-4.module+el8.10.0+22202+761b9a65
skopeoRHEL 82:1.14.5-3.module+el8.10.0+22202+761b9a65
skopeo-testsRHEL 82:1.14.5-3.module+el8.10.0+22202+761b9a65
slirp4netnsRHEL 80:1.2.3-1.module+el8.10.0+22202+761b9a65
toolboxRHEL 80:0.0.99.5-2.module+el8.10.0+22202+761b9a65
toolbox-testsRHEL 80:0.0.99.5-2.module+el8.10.0+22202+761b9a65
udicaRHEL 80:0.2.6-21.module+el8.10.0+22202+761b9a65

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-1394 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0153 None reported
High CVE-2024-3727 apptainer: This update for apptainer fixes the following issues: - CVE-2023-45288: Fixed unclosed connections when receiving to... 8.3 0.0128 None reported
High CVE-2024-37891 python-urllib3: This update for python-urllib3 fixes the following issues: - CVE-2024-37891: Fixed proxy-authorization request heade... 8.8 0.0114 None reported
High CVE-2024-37298 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.5 0.0110 None reported
High CVE-2024-24789 container-suseconnect: This update for container-suseconnect rebuilds it against current go1.21.13.1. Security issues fixed: CVE-2024-24789... 7.5 0.0044 None reported
Routine CVE-2024-6104 podman: This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1... 6.0 0.0036 None reported
Showing 1 to 6 of 6 1