Linux · Oracle Linux · Security advisory · July 19, 2023

ELSA-2023-12579: Security update for 32 packages

ELSA-2023-12579, released July 19, 2023, fixes 3 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0045
39th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsol 82:1.5.0-2.module+el8.8.0+21045+adcb6a64
buildahol 81:1.29.1-2.module+el8.8.0+21056+d98a0860
buildah-testsol 81:1.29.1-2.module+el8.8.0+21056+d98a0860
cockpit-podmanol 80:63.1-1.module+el8.8.0+21045+adcb6a64
conmonol 83:2.1.6-1.module+el8.8.0+21045+adcb6a64
container-selinuxol 82:2.205.0-2.module+el8.8.0+21045+adcb6a64
containernetworking-pluginsol 81:1.2.0-1.module+el8.8.0+21045+adcb6a64
containers-commonol 82:1-64.0.1.module+el8.8.0+21056+d98a0860
critol 80:3.15-3.module+el8.8.0+21045+adcb6a64
criuol 80:3.15-3.module+el8.8.0+21045+adcb6a64
criu-develol 80:3.15-3.module+el8.8.0+21045+adcb6a64
criu-libsol 80:3.15-3.module+el8.8.0+21045+adcb6a64
crunol 80:1.8.4-2.module+el8.8.0+21056+d98a0860
fuse-overlayfsol 80:1.11-1.module+el8.8.0+21056+d98a0860
libslirpol 80:4.4.0-1.module+el8.8.0+21045+adcb6a64
libslirp-develol 80:4.4.0-1.module+el8.8.0+21045+adcb6a64
netavarkol 82:1.5.0-5.module+el8.8.0+21056+d98a0860
oci-seccomp-bpf-hookol 80:1.2.8-1.module+el8.8.0+21045+adcb6a64
podmanol 83:4.4.1-12.module+el8.8.0+21056+d98a0860
podman-catatonitol 83:4.4.1-12.module+el8.8.0+21056+d98a0860
podman-dockerol 83:4.4.1-12.module+el8.8.0+21056+d98a0860
podman-gvproxyol 83:4.4.1-12.module+el8.8.0+21056+d98a0860
podman-pluginsol 83:4.4.1-12.module+el8.8.0+21056+d98a0860
podman-remoteol 83:4.4.1-12.module+el8.8.0+21056+d98a0860
podman-testsol 83:4.4.1-12.module+el8.8.0+21056+d98a0860
python3-criuol 80:3.15-3.module+el8.8.0+21045+adcb6a64
python3-podmanol 80:4.4.1-1.module+el8.8.0+21045+adcb6a64
runcol 81:1.1.4-1.0.1.module+el8.8.0+21119+51f68ed8
skopeool 82:1.11.2-0.2.module+el8.8.0+21045+adcb6a64
skopeo-testsol 82:1.11.2-0.2.module+el8.8.0+21045+adcb6a64
slirp4netnsol 80:1.2.0-2.module+el8.8.0+21045+adcb6a64
udicaol 80:0.2.6-20.module+el8.8.0+21045+adcb6a64

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-27561 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...9.8 0.0045 None reported
High CVE-2023-28642 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...9.8 0.0034 None reported
High CVE-2023-25809 aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...9.8 0.0032 None reported
Showing 1 to 3 of 3 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.