Linux · Red Hat · Security advisory · September 24, 2024

RHSA-2024:6969: Security update for 34 packages

RHSA-2024:6969, released September 24, 2024, fixes 4 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0141
72nd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.10.0-1.module+el8.10.0+22283+6d6d094a
buildahRHEL 82:1.33.8-4.module+el8.10.0+22283+6d6d094a
buildah-testsRHEL 82:1.33.8-4.module+el8.10.0+22283+6d6d094a
cockpit-podmanRHEL 80:84.1-1.module+el8.10.0+22283+6d6d094a
conmonRHEL 83:2.1.10-1.module+el8.10.0+22283+6d6d094a
container-selinuxRHEL 82:2.229.0-2.module+el8.10.0+22283+6d6d094a
containernetworking-pluginsRHEL 81:1.4.0-5.module+el8.10.0+22283+6d6d094a
containers-commonRHEL 82:1-82.module+el8.10.0+22283+6d6d094a
critRHEL 80:3.18-5.module+el8.10.0+22283+6d6d094a
criuRHEL 80:3.18-5.module+el8.10.0+22283+6d6d094a
criu-develRHEL 80:3.18-5.module+el8.10.0+22283+6d6d094a
criu-libsRHEL 80:3.18-5.module+el8.10.0+22283+6d6d094a
crunRHEL 80:1.14.3-2.module+el8.10.0+22283+6d6d094a
fuse-overlayfsRHEL 80:1.13-1.module+el8.10.0+22283+6d6d094a
libslirpRHEL 80:4.4.0-2.module+el8.10.0+22283+6d6d094a
libslirp-develRHEL 80:4.4.0-2.module+el8.10.0+22283+6d6d094a
netavarkRHEL 82:1.10.3-1.module+el8.10.0+22283+6d6d094a
oci-seccomp-bpf-hookRHEL 80:1.2.10-1.module+el8.10.0+22283+6d6d094a
podmanRHEL 84:4.9.4-13.module+el8.10.0+22283+6d6d094a
podman-catatonitRHEL 84:4.9.4-13.module+el8.10.0+22283+6d6d094a
podman-dockerRHEL 84:4.9.4-13.module+el8.10.0+22283+6d6d094a
podman-gvproxyRHEL 84:4.9.4-13.module+el8.10.0+22283+6d6d094a
podman-pluginsRHEL 84:4.9.4-13.module+el8.10.0+22283+6d6d094a
podman-remoteRHEL 84:4.9.4-13.module+el8.10.0+22283+6d6d094a
podman-testsRHEL 84:4.9.4-13.module+el8.10.0+22283+6d6d094a
python3-criuRHEL 80:3.18-5.module+el8.10.0+22283+6d6d094a
python3-podmanRHEL 80:4.9.0-2.module+el8.10.0+22283+6d6d094a
runcRHEL 81:1.1.12-4.module+el8.10.0+22283+6d6d094a
skopeoRHEL 82:1.14.5-3.module+el8.10.0+22283+6d6d094a
skopeo-testsRHEL 82:1.14.5-3.module+el8.10.0+22283+6d6d094a
slirp4netnsRHEL 80:1.2.3-1.module+el8.10.0+22283+6d6d094a
toolboxRHEL 80:0.0.99.5-2.module+el8.10.0+22283+6d6d094a
toolbox-testsRHEL 80:0.0.99.5-2.module+el8.10.0+22283+6d6d094a
udicaRHEL 80:0.2.6-21.module+el8.10.0+22283+6d6d094a

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-24791 container-suseconnect: This update for container-suseconnect rebuilds it against current go1.21.13.1. Security issues fixed: CVE-2024-24789...7.5 0.0141 None reported
High CVE-2024-24784 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp...7.5 0.0105 None reported
High CVE-2024-24788 golang-1.22: A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.7.5 0.0099 None reported
High CVE-2024-24783 go1.21-openssl: This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improp...7.5 0.0067 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.