Linux · Red Hat · Security advisory · February 8, 2024

RHSA-2024:0752: Security update for 34 packages

RHSA-2024:0752, released February 8, 2024, fixes 1 CVE across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
8.6
Base score, 0 to 10
Highest EPSS
0.1892
97th percentile

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.7.0-1.module+el8.9.0+21243+a586538b
buildahRHEL 81:1.31.3-3.module+el8.9.0+21243+a586538b
buildah-testsRHEL 81:1.31.3-3.module+el8.9.0+21243+a586538b
cockpit-podmanRHEL 80:75-1.module+el8.9.0+21243+a586538b
conmonRHEL 83:2.1.8-1.module+el8.9.0+21243+a586538b
container-selinuxRHEL 82:2.221.0-1.module+el8.9.0+21243+a586538b
containernetworking-pluginsRHEL 81:1.3.0-8.module+el8.9.0+21243+a586538b
containers-commonRHEL 82:1-71.module+el8.9.0+21243+a586538b
critRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
criuRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
criu-develRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
criu-libsRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
crunRHEL 80:1.8.7-1.module+el8.9.0+21243+a586538b
fuse-overlayfsRHEL 80:1.12-1.module+el8.9.0+21243+a586538b
libslirpRHEL 80:4.4.0-1.module+el8.9.0+21243+a586538b
libslirp-develRHEL 80:4.4.0-1.module+el8.9.0+21243+a586538b
netavarkRHEL 82:1.7.0-2.module+el8.9.0+21243+a586538b
oci-seccomp-bpf-hookRHEL 80:1.2.9-1.module+el8.9.0+21243+a586538b
podmanRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-catatonitRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-dockerRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-gvproxyRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-pluginsRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-remoteRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
podman-testsRHEL 83:4.6.1-8.module+el8.9.0+21243+a586538b
python3-criuRHEL 80:3.18-4.module+el8.9.0+21243+a586538b
python3-podmanRHEL 80:4.6.0-2.module+el8.9.0+21243+a586538b
runcRHEL 81:1.1.12-1.module+el8.9.0+21243+a586538b
skopeoRHEL 82:1.13.3-3.module+el8.9.0+21243+a586538b
skopeo-testsRHEL 82:1.13.3-3.module+el8.9.0+21243+a586538b
slirp4netnsRHEL 80:1.2.1-1.module+el8.9.0+21243+a586538b
toolboxRHEL 80:0.0.99.4-5.module+el8.9.0+21243+a586538b
toolbox-testsRHEL 80:0.0.99.4-5.module+el8.9.0+21243+a586538b
udicaRHEL 80:0.2.6-20.module+el8.9.0+21243+a586538b

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-21626 GitHub: CVE-2024-21626 Container breakout through process.cwd trickery and leaked fds8.6 0.1892 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.