Linux · Red Hat · Security advisory · May 22, 2024

RHSA-2024:3254: Security update for 34 packages

RHSA-2024:3254, released May 22, 2024, fixes 3 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Highest CVSS
8.6
Base score, 0 to 10
Highest EPSS
0.0173
77th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.10.0-1.module+el8.10.0+21209+52deeb51
buildahRHEL 82:1.33.7-1.module+el8.10.0+21590+d7d75709
buildah-testsRHEL 82:1.33.7-1.module+el8.10.0+21590+d7d75709
cockpit-podmanRHEL 80:84.1-1.module+el8.10.0+21373+0d273fdf
conmonRHEL 83:2.1.10-1.module+el8.10.0+21077+98b84d8a
container-selinuxRHEL 82:2.229.0-2.module+el8.10.0+21196+3f0abbca
containernetworking-pluginsRHEL 81:1.4.0-2.module+el8.10.0+21366+f9cb49f8
containers-commonRHEL 82:1-81.module+el8.10.0+21340+c6c7475a
critRHEL 80:3.18-5.module+el8.10.0+21672+01ba06ae
criuRHEL 80:3.18-5.module+el8.10.0+21672+01ba06ae
criu-develRHEL 80:3.18-5.module+el8.10.0+21672+01ba06ae
criu-libsRHEL 80:3.18-5.module+el8.10.0+21672+01ba06ae
crunRHEL 80:1.14.3-2.module+el8.10.0+21340+c6c7475a
fuse-overlayfsRHEL 80:1.13-1.module+el8.10.0+20412+95ee28e2
libslirpRHEL 80:4.4.0-2.module+el8.10.0+21672+01ba06ae
libslirp-develRHEL 80:4.4.0-2.module+el8.10.0+21672+01ba06ae
netavarkRHEL 82:1.10.3-1.module+el8.10.0+21306+6be40ce7
oci-seccomp-bpf-hookRHEL 80:1.2.10-1.module+el8.10.0+20565+a40ba0e5
podmanRHEL 84:4.9.4-1.module+el8.10.0+21632+761e0d34
podman-catatonitRHEL 84:4.9.4-1.module+el8.10.0+21632+761e0d34
podman-dockerRHEL 84:4.9.4-1.module+el8.10.0+21632+761e0d34
podman-gvproxyRHEL 84:4.9.4-1.module+el8.10.0+21632+761e0d34
podman-pluginsRHEL 84:4.9.4-1.module+el8.10.0+21632+761e0d34
podman-remoteRHEL 84:4.9.4-1.module+el8.10.0+21632+761e0d34
podman-testsRHEL 84:4.9.4-1.module+el8.10.0+21632+761e0d34
python3-criuRHEL 80:3.18-5.module+el8.10.0+21672+01ba06ae
python3-podmanRHEL 80:4.9.0-1.module+el8.10.0+21196+3f0abbca
runcRHEL 81:1.1.12-1.module+el8.10.0+21251+62b7388c
skopeoRHEL 82:1.14.3-2.module+el8.10.0+21728+a1d9b0ab
skopeo-testsRHEL 82:1.14.3-2.module+el8.10.0+21728+a1d9b0ab
slirp4netnsRHEL 80:1.2.3-1.module+el8.10.0+21306+6be40ce7
toolboxRHEL 80:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89
toolbox-testsRHEL 80:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89
udicaRHEL 80:0.2.6-21.module+el8.10.0+21672+01ba06ae

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-41715 golang-github-prometheus-prometheus: This update for golang-github-prometheus-prometheus fixes the following issues: - Require Go > 1.20 for building -...7.5 0.0173 None reported
High CVE-2022-2880 delve: Go Toolset provides the Go programming language tools and libraries7.5 0.0141 None reported
High CVE-2024-1753 buildah: This update for buildah fixes the following issues: Update to version 1.35.4: * Bump to Buildah v1.35.4 * CVE-2024-...8.6 0.0046 None reported
Showing 1 to 3 of 3 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.