Linux · Red Hat · Security advisory · February 13, 2025

RHSA-2025:1372: Security update for 34 packages

RHSA-2025:1372, released February 13, 2025, fixes 1 CVE across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
8.6
Base score, 0 to 10
Highest EPSS
0.0037
30th percentile

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.10.1-2.module+el8.10.0+22417+2fb00970
buildahRHEL 82:1.33.12-1.module+el8.10.0+22744+7794713b
buildah-testsRHEL 82:1.33.12-1.module+el8.10.0+22744+7794713b
cockpit-podmanRHEL 80:84.1-1.module+el8.10.0+22417+2fb00970
conmonRHEL 83:2.1.10-1.module+el8.10.0+22417+2fb00970
container-selinuxRHEL 82:2.229.0-2.module+el8.10.0+22417+2fb00970
containernetworking-pluginsRHEL 81:1.4.0-5.module+el8.10.0+22417+2fb00970
containers-commonRHEL 82:1-82.module+el8.10.0+22417+2fb00970
critRHEL 80:3.18-5.module+el8.10.0+22417+2fb00970
criuRHEL 80:3.18-5.module+el8.10.0+22417+2fb00970
criu-develRHEL 80:3.18-5.module+el8.10.0+22417+2fb00970
criu-libsRHEL 80:3.18-5.module+el8.10.0+22417+2fb00970
crunRHEL 80:1.14.3-2.module+el8.10.0+22417+2fb00970
fuse-overlayfsRHEL 80:1.13-1.module+el8.10.0+22417+2fb00970
libslirpRHEL 80:4.4.0-2.module+el8.10.0+22417+2fb00970
libslirp-develRHEL 80:4.4.0-2.module+el8.10.0+22417+2fb00970
netavarkRHEL 82:1.10.3-1.module+el8.10.0+22417+2fb00970
oci-seccomp-bpf-hookRHEL 80:1.2.10-1.module+el8.10.0+22417+2fb00970
podmanRHEL 84:4.9.4-19.module+el8.10.0+22744+7794713b
podman-catatonitRHEL 84:4.9.4-19.module+el8.10.0+22744+7794713b
podman-dockerRHEL 84:4.9.4-19.module+el8.10.0+22744+7794713b
podman-gvproxyRHEL 84:4.9.4-19.module+el8.10.0+22744+7794713b
podman-pluginsRHEL 84:4.9.4-19.module+el8.10.0+22744+7794713b
podman-remoteRHEL 84:4.9.4-19.module+el8.10.0+22744+7794713b
podman-testsRHEL 84:4.9.4-19.module+el8.10.0+22744+7794713b
python3-criuRHEL 80:3.18-5.module+el8.10.0+22417+2fb00970
python3-podmanRHEL 80:4.9.0-3.module+el8.10.0+22417+2fb00970
runcRHEL 81:1.1.12-6.module+el8.10.0+22722+0028f543
skopeoRHEL 82:1.14.5-3.module+el8.10.0+22417+2fb00970
skopeo-testsRHEL 82:1.14.5-3.module+el8.10.0+22417+2fb00970
slirp4netnsRHEL 80:1.2.3-1.module+el8.10.0+22417+2fb00970
toolboxRHEL 80:0.0.99.5-2.module+el8.10.0+22417+2fb00970
toolbox-testsRHEL 80:0.0.99.5-2.module+el8.10.0+22417+2fb00970
udicaRHEL 80:0.2.6-21.module+el8.10.0+22417+2fb00970

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-11218 buildah: This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error w...8.6 0.0037 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.