Linux · Security advisory · November 5, 2024

RHSA-2024:8846: Security update for 34 packages

RHSA-2024:8846, released November 5, 2024, fixes 3 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0103
63rd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.10.1-2.module+el8.10.0+22397+e3c95ba6
buildahRHEL 82:1.33.10-1.module+el8.10.0+22397+e3c95ba6
buildah-testsRHEL 82:1.33.10-1.module+el8.10.0+22397+e3c95ba6
cockpit-podmanRHEL 80:84.1-1.module+el8.10.0+22397+e3c95ba6
conmonRHEL 83:2.1.10-1.module+el8.10.0+22397+e3c95ba6
container-selinuxRHEL 82:2.229.0-2.module+el8.10.0+22397+e3c95ba6
containernetworking-pluginsRHEL 81:1.4.0-5.module+el8.10.0+22397+e3c95ba6
containers-commonRHEL 82:1-82.module+el8.10.0+22397+e3c95ba6
critRHEL 80:3.18-5.module+el8.10.0+22397+e3c95ba6
criuRHEL 80:3.18-5.module+el8.10.0+22397+e3c95ba6
criu-develRHEL 80:3.18-5.module+el8.10.0+22397+e3c95ba6
criu-libsRHEL 80:3.18-5.module+el8.10.0+22397+e3c95ba6
crunRHEL 80:1.14.3-2.module+el8.10.0+22397+e3c95ba6
fuse-overlayfsRHEL 80:1.13-1.module+el8.10.0+22397+e3c95ba6
libslirpRHEL 80:4.4.0-2.module+el8.10.0+22397+e3c95ba6
libslirp-develRHEL 80:4.4.0-2.module+el8.10.0+22397+e3c95ba6
netavarkRHEL 82:1.10.3-1.module+el8.10.0+22397+e3c95ba6
oci-seccomp-bpf-hookRHEL 80:1.2.10-1.module+el8.10.0+22397+e3c95ba6
podmanRHEL 84:4.9.4-15.module+el8.10.0+22397+e3c95ba6
podman-catatonitRHEL 84:4.9.4-15.module+el8.10.0+22397+e3c95ba6
podman-dockerRHEL 84:4.9.4-15.module+el8.10.0+22397+e3c95ba6
podman-gvproxyRHEL 84:4.9.4-15.module+el8.10.0+22397+e3c95ba6
podman-pluginsRHEL 84:4.9.4-15.module+el8.10.0+22397+e3c95ba6
podman-remoteRHEL 84:4.9.4-15.module+el8.10.0+22397+e3c95ba6
podman-testsRHEL 84:4.9.4-15.module+el8.10.0+22397+e3c95ba6
python3-criuRHEL 80:3.18-5.module+el8.10.0+22397+e3c95ba6
python3-podmanRHEL 80:4.9.0-2.module+el8.10.0+22397+e3c95ba6
runcRHEL 81:1.1.12-5.module+el8.10.0+22397+e3c95ba6
skopeoRHEL 82:1.14.5-3.module+el8.10.0+22397+e3c95ba6
skopeo-testsRHEL 82:1.14.5-3.module+el8.10.0+22397+e3c95ba6
slirp4netnsRHEL 80:1.2.3-1.module+el8.10.0+22397+e3c95ba6
toolboxRHEL 80:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6
toolbox-testsRHEL 80:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6
udicaRHEL 80:0.2.6-21.module+el8.10.0+22397+e3c95ba6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-9341 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.2 0.0103 None reported
High CVE-2024-9675 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.8 0.0039 None reported
Routine CVE-2024-9407 conmon: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 4.7 0.0029 None reported
Showing 1 to 3 of 3 1