Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Toolbox Software Security Update

published 1 year ago

Summary

Red Hat has released a security update for Toolbox, a set of tools for system administrators. This update fixes a weakness that could allow an attacker to gain unauthorized access to your system. To stay protected, ensure you install the latest version of Toolbox from a trusted source.

What to do

Update redhat toolbox to version 0:0.0.99.5-5.el9.
Update redhat toolbox-debuginfo to version 0:0.0.99.5-5.el9.
Update redhat toolbox-debugsource to version 0:0.0.99.5-5.el9.
Update redhat toolbox-tests to version 0:0.0.99.5-5.el9.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	toolbox	< 0:0.0.99.5-5.el9 Fix: upgrade to 0:0.0.99.5-5.el9
Red Hat:enterprise_linux:9::appstream	redhat	toolbox-debuginfo	< 0:0.0.99.5-5.el9 Fix: upgrade to 0:0.0.99.5-5.el9
Red Hat:enterprise_linux:9::appstream	redhat	toolbox-debugsource	< 0:0.0.99.5-5.el9 Fix: upgrade to 0:0.0.99.5-5.el9
Red Hat:enterprise_linux:9::appstream	redhat	toolbox-tests	< 0:0.0.99.5-5.el9 Fix: upgrade to 0:0.0.99.5-5.el9

Original advisory text

Red Hat Security Advisory: toolbox security update

References

https://access.redhat.com/errata/RHSA-2024:9135 Vendor Advisory
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_rel... Third Party Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2268017 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2268022 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2279814 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2295310 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9135.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-45290 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-45290 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-45290 Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/03/08/4 Third Party Advisory
https://go.dev/cl/569341 Third Party Advisory
https://go.dev/issue/65383 Third Party Advisory
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg Third Party Advisory
https://pkg.go.dev/vuln/GO-2024-2599 Vendor Advisory
https://security.netapp.com/advisory/ntap-20240329-0004 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-24785 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-24785 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-24785 Vendor Advisory
https://go.dev/cl/564196 Third Party Advisory
https://go.dev/issue/65697 Third Party Advisory
https://vuln.go.dev/ID/GO-2024-2610.json Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-24788 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-24788 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-24788 Vendor Advisory
https://pkg.go.dev/vuln/GO-2024-2824 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-24791 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-24791 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-24791 Vendor Advisory
https://go.dev/cl/591255 Third Party Advisory
https://go.dev/issue/67555 Third Party Advisory
https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published15 Nov 2024

Updated13 Mar 2026

First seen6 Mar 2026

Sources

RHSA-2024:9135 · OSV

Track software like this

Free during beta