Linux · AlmaLinux · Security advisory · December 12, 2023

ALSA-2023:7753: Security update for 55 packages

ALSA-2023:7753, released December 12, 2023, fixes 2 CVEs across 55 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0136
71st percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
fence-agents-aliyunalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-allalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-amt-wsalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-apcalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-apc-snmpalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-awsalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-azure-armalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-bladecenteralmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-brocadealmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-cisco-mdsalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-cisco-ucsalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-commonalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-computealmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-drac5almalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-eaton-snmpalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-emersonalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-epsalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-gcealmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-heuristics-pingalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-hpbladealmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ibm-powervsalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ibm-vpcalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ibmbladealmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ifmibalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ilo-moonshotalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ilo-mpalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ilo-sshalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ilo2almalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-intelmodularalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ipdualmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-ipmilanalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-kdumpalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-kubevirtalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-lparalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-mpathalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-openstackalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-redfishalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-rhevmalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-rsaalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-rsbalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-sbdalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-scsialmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-virshalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-vmware-restalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-vmware-soapalmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-wtialmalinux 94.10.0-55.el9_3.2.alma.1
fence-agents-zvmalmalinux 94.10.0-55.el9_3.2.alma.1
fence-virtalmalinux 94.10.0-55.el9_3.2.alma.1
fence-virtdalmalinux 94.10.0-55.el9_3.2.alma.1
fence-virtd-cpgalmalinux 94.10.0-55.el9_3.2.alma.1
fence-virtd-libvirtalmalinux 94.10.0-55.el9_3.2.alma.1
fence-virtd-multicastalmalinux 94.10.0-55.el9_3.2.alma.1
fence-virtd-serialalmalinux 94.10.0-55.el9_3.2.alma.1
fence-virtd-tcpalmalinux 94.10.0-55.el9_3.2.alma.1
ha-cloud-supportalmalinux 94.10.0-55.el9_3.2.alma.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-43804 python-urllib3: urllib3 is a user-friendly HTTP client library for Python8.1 0.0136 None reported
High CVE-2023-37920 ca-certificates: The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundatio...9.8 0.0057 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.