Linux · SUSE Linux Enterprise · Security advisory · November 5, 2024

SUSE-SU-2024:3911-1: govulncheck-vulndb security update

SUSE-SU-2024:3911-1, released November 5, 2024, fixes 42 CVEs in govulncheck-vulndb (version 0.0.20241030T212825-150000.1.9.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
42
None rated Critical
Exploited
0
None reported
Highest CVSS
8.2
Base score, 0 to 10
Highest EPSS
0.9755
99th percentile

Priority of the 42 CVEs

Patch now 0 Urgent 0 High 3 Routine 39

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 15.60.0.20241030T212825-150000.1.9.1
govulncheck-vulndbsles 15.60.0.20241030T212825-150000.1.9.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-9341 buildah: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library in cri-o (nsc#1231230).8.2 0.0103 None reported
High CVE-2024-9675 buildah: Fixed arbitrary cache directory mount (bsc#1231499)7.8 0.0039 None reported
High CVE-2024-9355 govulncheck-vulndb: GO-2024-3167 GHSA-3h3x-2hwv-hr528.2 0.0030 None reported
Routine CVE-2024-9264 govulncheck-vulndb: GO-2024-3215 GHSA-q99m-qcv4-fpm7n/a 0.9755 None reported
Routine CVE-2024-49380 govulncheck-vulndb: GO-2024-3213 * GO-2024-3214 CVE-2024-49381 * GO-2024-3215 CVE-2024-9264 GHSA-q99m-qcv4-fpm7 * GO-2024-3216 CVE-2024-4...n/a 0.0271 None reported
Routine CVE-2024-49757 govulncheck-vulndb: GO-2024-3217 GHSA-3rmw-76m6-4gjcn/a 0.0252 None reported
Routine CVE-2024-9486 govulncheck-vulndb: GO-2024-3203 * GO-2024-3204 CVE-2024-9594n/a 0.0221 None reported
Routine CVE-2024-9594 govulncheck-vulndb: Security update for govulncheck-vulndbn/a 0.0173 None reported
Routine CVE-2024-38365 govulncheck-vulndb: GO-2024-3189 GHSA-27vh-h6mc-q6g8n/a 0.0101 None reported
Routine CVE-2024-22036 govulncheck-vulndb: GO-2024-3221 GHSA-h99m-6755-rgwcn/a 0.0081 None reported
Routine CVE-2024-36814 govulncheck-vulndb: GO-2024-3184 GHSA-9cp9-8gw2-8v7mn/a 0.0080 None reported
Routine CVE-2024-49381 govulncheck-vulndb: GO-2024-3214 * GO-2024-3215 CVE-2024-9264 GHSA-q99m-qcv4-fpm7 * GO-2024-3216 CVE-2024-49753 GHSA-6cf5-w9h3-4rqv * GO-...n/a 0.0076 None reported
Routine CVE-2024-39223 govulncheck-vulndb: GO-2024-3224 GHSA-8wxx-35qc-vp6rn/a 0.0070 None reported
Routine CVE-2024-49753 govulncheck-vulndb: GO-2024-3216 GHSA-6cf5-w9h3-4rqvn/a 0.0065 None reported
Routine CVE-2023-32197 govulncheck-vulndb: GO-2024-3220 GHSA-7h8m-pvw3-5gh4n/a 0.0064 None reported
Routine CVE-2024-47003 govulncheck-vulndb: GO-2024-3164 GHSA-59hf-mpf8-pqjhn/a 0.0058 None reported
Routine CVE-2024-47616 govulncheck-vulndb: GO-2024-3179 GHSA-r7rh-jww5-5fjrn/a 0.0058 None reported
Routine CVE-2024-48921 govulncheck-vulndb: GO-2024-3230 GHSA-qjvc-p88j-j9rmn/a 0.0057 None reported
Routine CVE-2024-50312 govulncheck-vulndb: GO-2024-3211 * GO-2024-3212 GHSA-rjfv-pjvx-mjgv * GO-2024-3213 CVE-2024-49380 * GO-2024-3214 CVE-2024-49381 * GO-2024...n/a 0.0056 None reported
Routine CVE-2024-47877 govulncheck-vulndb: GO-2024-3196 GHSA-8rm2-93mq-jqhcn/a 0.0055 None reported
Routine CVE-2024-9180 govulncheck-vulndb: GO-2024-3191 GHSA-rr8j-7w34-xp5jn/a 0.0053 None reported
Routine CVE-2024-47534 govulncheck-vulndb: GO-2024-3166 GHSA-4f8r-qqr9-fq8jn/a 0.0051 None reported
Routine CVE-2024-7558 govulncheck-vulndb: GO-2024-3173 GHSA-mh98-763h-m9v4n/a 0.0050 None reported
Routine CVE-2023-22644 govulncheck-vulndb: GO-2024-3201 - Go CVE Numbering Authority IDs added or updated with aliasesn/a 0.0046 None reported
Routine CVE-2022-45157 govulncheck-vulndb: GO-2024-3223 GHSA-xj7w-r753-vj8vn/a 0.0044 None reported
Showing 1 to 25 of 42 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.