Lucene search
OracleLinuxELSA-2024-6311HistorySep 05, 2024 - 12:00 a.m.
resource-agents security update
2024-09-0500:00:00
linux.oracle.com
2
resource-agents
security update
cve fixes
tls issue
metadata request retry
rhel-50360
rhel-50041
rhel-44923
rhel-34137
rhel-32828
CVSS3
4.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
[4.9.0-54.4]
- bundled setuptools: fix CVE-2024-6345
Resolves: RHEL-50360
[4.9.0-54.3] - gcp-pd-move: fix TLS_VERSION_1 issue
Resolves: RHEL-50041
[4.9.0-54.2] - bundled urllib3: fix CVE-2024-37891
Resolves: RHEL-44923
[4.9.0-54.1] - AWS agents: retry failed metadata requests to avoid instantly
failing when there is a hiccup in the network or metadata service - db2: fix OCF_SUCESS typo
Resolves: RHEL-34137, RHEL-32828
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | resource-agents | < 4.9.0-54.el8_10.4 | resource-agents-4.9.0-54.el8_10.4.src.rpm |
| oracle linux | 8 | aarch64 | resource-agents | < 4.9.0-54.el8_10.4 | resource-agents-4.9.0-54.el8_10.4.aarch64.rpm |
| oracle linux | 8 | src | resource-agents | < 4.9.0-54.el8_10.4 | resource-agents-4.9.0-54.el8_10.4.src.rpm |
| oracle linux | 8 | x86_64 | resource-agents | < 4.9.0-54.el8_10.4 | resource-agents-4.9.0-54.el8_10.4.x86_64.rpm |
Related
nessus
nessus
Oracle Linux 8 : resource-agents (ELSA-2024-6311)
2024-09-05 00:00:00
RHEL 8 : fence-agents (RHSA-2024:6309)
2024-09-04 00:00:00
AlmaLinux 8 : fence-agents (ALSA-2024:6309)
2024-09-05 00:00:00
almalinux
almalinux
Moderate: fence-agents security update
2024-09-04 00:00:00
Moderate: resource-agents security update
2024-09-04 00:00:00
Moderate: fence-agents security update
2024-07-09 00:00:00
osv
osv
Moderate: resource-agents security update
2024-09-04 00:00:00
Moderate: fence-agents security update
2024-09-04 00:00:00
CGA-w3h9-h7jv-6q22
2024-06-21 16:23:00
oraclelinux
oraclelinux
fence-agents security update
2024-09-04 00:00:00
fence-agents security update
2024-07-09 00:00:00
python-urllib3 security update
2024-09-03 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 24.0.0-IF001
2024-08-08 17:11:19
veracode
veracode
Sensitive Information Disclosure
2024-06-18 04:57:38
Code Injection
2024-07-15 10:16:11
f5
f5
K000140711: Python urllib3 vulnerability CVE-2024-37891
2024-08-15 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2879-1)
2024-08-13 00:00:00
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2024-2094)
2024-08-09 00:00:00
Fedora: Security Advisory (FEDORA-2024-e0b0ad79b2)
2024-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: python-urllib3-1.26.19-1.fc39
2024-07-12 04:18:39
[SECURITY] Fedora 40 Update: python-urllib3-1.26.19-1.fc40
2024-07-02 02:34:38
[SECURITY] Fedora 39 Update: python3.6-3.6.15-34.fc39
2024-08-13 01:35:31
cve
cve
CVE-2024-37891
2024-06-17 20:15:13
cvelist
cvelist
vulnrichment
vulnrichment
debiancve
debiancve
CVE-2024-37891
2024-06-17 20:15:13
redhat
redhat
(RHSA-2024:5622) Moderate: fence-agents security update
2024-08-20 15:33:02
(RHSA-2024:5526) Moderate: python-urllib3 security update
2024-08-19 00:59:40
(RHSA-2024:4730) Moderate: fence-agents update
2024-07-23 14:41:35
ubuntucve
ubuntucve
CVE-2024-37891
2024-06-17 00:00:00
CVE-2024-6345
2024-07-15 00:00:00
github
github
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
2024-06-17 21:37:20
setuptools vulnerable to Command Injection via package URL
2024-07-15 03:30:57
wolfi
wolfi
CVE-2024-37891 vulnerabilities
2024-09-17 21:56:32
nvd
nvd
CVE-2024-37891
2024-06-17 20:15:13
cbl_mariner
cbl_mariner
redhatcve
redhatcve
CVE-2024-37891
2024-06-17 23:21:38
CVE-2024-6345
2024-07-15 03:34:39
rocky
rocky
python3.11-setuptools security update
2024-08-21 14:52:31
python3.12-setuptools security update
2024-08-21 14:53:26
python3.11-setuptools security update
2024-08-21 14:53:29
alpinelinux
alpinelinux
CVE-2024-6345
2024-07-15 01:15:01
CVSS3
4.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
Related for ELSA-2024-6311