Linux · Security advisory · May 7, 2025

RLSA-2024:2988: Security update for 15 packages

RLSA-2024:2988, released May 7, 2025, fixes 16 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
16
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9355
99th percentile

Priority of the 16 CVEs

Patch now 0 Urgent 0 High 16 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsrocky 82:1.10.0-1.module+el8.10.0+1815+5fe7415e
cockpit-podmanrocky 80:84.1-1.module+el8.10.0+1815+5fe7415e
conmonrocky 83:2.1.10-1.module+el8.10.0+1896+b18fa106
container-selinuxrocky 82:2.229.0-2.module+el8.10.0+1815+5fe7415e
containernetworking-pluginsrocky 81:1.4.0-2.module+el8.10.0+1815+5fe7415e
containers-commonrocky 82:1-81.module+el8.10.0+1815+5fe7415e
crunrocky 80:1.14.3-2.module+el8.10.0+1815+5fe7415e
fuse-overlayfsrocky 80:1.13-1.module+el8.10.0+1815+5fe7415e
libslirprocky 80:4.4.0-1.module+el8.9.0+1445+07728297
netavarkrocky 82:1.10.3-1.module+el8.10.0+1815+5fe7415e
oci-seccomp-bpf-hookrocky 80:1.2.10-1.module+el8.10.0+1815+5fe7415e
python-podmanrocky 80:4.9.0-1.module+el8.10.0+1815+5fe7415e
runcrocky 81:1.1.12-1.module+el8.10.0+1815+5fe7415e
slirp4netnsrocky 80:1.2.3-1.module+el8.10.0+1815+5fe7415e
toolboxrocky 80:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-48795 OpenSSH: Multiple issues in OpenSSH 7.5 0.9355 None reported
High CVE-2021-34558 grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB 7.5 0.0698 None reported
High CVE-2021-33198 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0337 None reported
High CVE-2022-2879 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0201 None reported
High CVE-2022-41715 golang-github-prometheus-prometheus: This update for golang-github-prometheus-prometheus fixes the following issues: - Require Go > 1.20 for building -... 7.5 0.0173 None reported
High CVE-2023-29409 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0160 None reported
High CVE-2022-2880 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0141 None reported
High CVE-2023-39321 go-toolset: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0135 None reported
High CVE-2023-39322 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0135 None reported
High CVE-2023-45287 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.6 0.0125 None reported
High CVE-2023-39326 go-toolset: Go Toolset provides the Go programming language tools and libraries 8.6 0.0121 None reported
High CVE-2024-23650 docker: This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consump... 7.5 0.0114 None reported
High CVE-2023-39318 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0093 None reported
High CVE-2023-39319 delve: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from t... 7.5 0.0091 None reported
High CVE-2018-25091 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.5 0.0059 None reported
High CVE-2023-45803 python3-urllib3: The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security... 7.5 0.0059 None reported
Showing 1 to 16 of 16 1