Linux · Security advisory · November 12, 2024

RHSA-2024:9454: Security update for 5 packages

RHSA-2024:9454, released November 12, 2024, fixes 7 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0133
71st percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 3 Routine 4

Fixed package versions

ProductReleaseFixed in
podmanRHEL 94:5.2.2-9.el9_5
podman-dockerRHEL 94:5.2.2-9.el9_5
podman-pluginsRHEL 94:5.2.2-9.el9_5
podman-remoteRHEL 94:5.2.2-9.el9_5
podman-testsRHEL 94:5.2.2-9.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-34156 go1.22: This update for go1.22 fixes the following issues: - Update go v1.22.7 - CVE-2024-34155: Fixed stack exhaustion in a... 7.5 0.0113 None reported
High CVE-2024-9341 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.2 0.0103 None reported
High CVE-2024-9675 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.8 0.0039 None reported
Routine CVE-2024-9676 libslirp-devel: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 6.5 0.0133 None reported
Routine CVE-2024-34158 go1.22: This update for go1.22 fixes the following issues: - Update go v1.22.7 - CVE-2024-34155: Fixed stack exhaustion in a... 5.9 0.0105 None reported
Routine CVE-2024-34155 go1.22: This update for go1.22 fixes the following issues: - Update go v1.22.7 - CVE-2024-34155: Fixed stack exhaustion in a... 5.9 0.0084 None reported
Routine CVE-2024-9407 conmon: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 4.7 0.0029 None reported
Showing 1 to 7 of 7 1