VDB

RHSA-2024%3A0759

RHSA-2024%3A0759 PUBLISHED CVSS 8.600000381469727 HIGH

Record from OSV · Published October 21, 2024

Red Hat Security Advisory: container-tools:rhel8 security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
libslirp-debuginfoRed Hat:rhel_eus:8.8::appstream4.4.0-1.module, 0:4.4.0-1.module+el8.8.0+21265+93802b02
podman-gvproxyRed Hat:rhel_eus:8.8::appstream4.4.1-17.module, 3:4.4.1-17.module+el8.8.0+21265+93802b02
podman-catatonit-debuginfoRed Hat:rhel_eus:8.8::appstream4.4.1-17.module, 3:4.4.1-17.module+el8.8.0+21265+93802b02
criu-libsRed Hat:rhel_eus:8.8::appstream3.15-4.module, 0:3.15-4.module+el8.8.0+21265+93802b02
oci-seccomp-bpf-hook-debugsourceRed Hat:rhel_eus:8.8::appstream1.2.8-1.module, 0:1.2.8-1.module+el8.8.0+21265+93802b02
libslirp-debugsourceRed Hat:rhel_eus:8.8::appstream4.4.0-1.module, 0:4.4.0-1.module+el8.8.0+21265+93802b02
buildah-tests-debuginfoRed Hat:rhel_eus:8.8::appstream1.29.2-1.module, 1:1.29.2-1.module+el8.8.0+21265+93802b02
podman-debuginfoRed Hat:rhel_eus:8.8::appstream4.4.1-17.module, 3:4.4.1-17.module+el8.8.0+21265+93802b02
skopeoRed Hat:rhel_eus:8.8::appstream2:1.11.2-0.2.module+el8.8.0+21265+93802b02, 1.11.2-0.2.module
buildah-debuginfoRed Hat:rhel_eus:8.8::appstream1.29.2-1.module, 1:1.29.2-1.module+el8.8.0+21265+93802b02
conmon-debuginfoRed Hat:rhel_eus:8.8::appstream3:2.1.6-1.module+el8.8.0+21265+93802b02, 2.1.6-1.module
criuRed Hat:rhel_eus:8.8::appstream3.15-4.module, 0:3.15-4.module+el8.8.0+21265+93802b02

53 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
8.600000381469727
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

VendorProductVersions
Red Hat:rhel_eus:8.8::appstreamlibslirp-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreampodman-gvproxy0, 0
Red Hat:rhel_eus:8.8::appstreampodman-catatonit-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreamcriu-libs0, 0
Red Hat:rhel_eus:8.8::appstreamoci-seccomp-bpf-hook-debugsource0, 0
Red Hat:rhel_eus:8.8::appstreamlibslirp-debugsource0, 0
Red Hat:rhel_eus:8.8::appstreambuildah-tests-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreampodman-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreamskopeo0, 0
Red Hat:rhel_eus:8.8::appstreambuildah-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreamconmon-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreamcriu0, 0
Red Hat:rhel_eus:8.8::appstreamslirp4netns-debugsource0, 0
Red Hat:rhel_eus:8.8::appstreamfuse-overlayfs-debugsource0, 0
Red Hat:rhel_eus:8.8::appstreampodman-docker0, 0
Red Hat:rhel_eus:8.8::appstreamnetavark0, 0
Red Hat:rhel_eus:8.8::appstreamrunc-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreamlibslirp-devel0, 0
Red Hat:rhel_eus:8.8::appstreamfuse-overlayfs-debuginfo0, 0
Red Hat:rhel_eus:8.8::appstreamaardvark-dns0, 0

…and 45 more

Timeline

  • Oct 21, 2024 CVE Published
  • May 1, 2026 CVE Updated
  • May 18, 2026 Distribution Patch (2 in total, the first dated here)
  • May 18, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2024%3A0759
vulnetix vdb fixes RHSA-2024%3A0759

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2024%253A0759/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›