Linux · Security advisory · May 7, 2025

RLSA-2024:0748: Security update for 14 packages

RLSA-2024:0748, released May 7, 2025, fixes 3 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1892
97th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
buildahrocky 81:1.24.6-7.module+el8.9.0+1445+07728297
cockpit-podmanrocky 80:46-1.module+el8.9.0+1445+07728297
conmonrocky 82:2.1.4-2.module+el8.9.0+1445+07728297
container-selinuxrocky 82:2.205.0-3.module+el8.9.0+1445+07728297
containers-commonrocky 82:1-38.module+el8.9.0+1445+07728297
criurocky 80:3.15-3.module+el8.9.0+1445+07728297
fuse-overlayfsrocky 80:1.9-2.module+el8.9.0+1445+07728297
libslirprocky 80:4.4.0-1.module+el8.9.0+1445+07728297
oci-seccomp-bpf-hookrocky 80:1.2.5-2.module+el8.9.0+1445+07728297
python-podmanrocky 80:4.0.0-2.module+el8.9.0+1445+07728297
runcrocky 81:1.1.12-1.module+el8.10.0+1815+5fe7415e
skopeorocky 82:1.6.2-9.module+el8.9.0+1578+aa900b44
slirp4netnsrocky 80:1.1.8-3.module+el8.9.0+1445+07728297
udicarocky 80:0.2.6-4.module+el8.9.0+1445+07728297

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-21626 GitHub: CVE-2024-21626 Container breakout through process.cwd trickery and leaked fds 8.6 0.1892 None reported
High CVE-2023-45287 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.6 0.0125 None reported
High CVE-2023-39326 go-toolset: Go Toolset provides the Go programming language tools and libraries 8.6 0.0121 None reported
Showing 1 to 3 of 3 1