Oracle Linux 8：container-tools:ol8 (ELSA-2024-3968)
medium Nessus Plugin ID 200721
語系：
概要
遠端 Oracle Linux 主機缺少一個或多個安全性更新。說明
遠端 Oracle Linux 8 主機中安裝的套件受到 ELSA-2024-3968 公告中提及的多個弱點影響。aardvark-dns [2:1.10.0-1]
- https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 的更新
- 相關：Jira:RHEL-2110
[2:1.9.0-1]
- https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 的更新
- 相關：Jira:RHEL-2110
[2:1.8.0-1]
- https://github.com/containers/aardvark-dns/releases/tag/v1.8.0 的更新
- 相關：Jira:RHEL-2110
buildah [2:1.33.7-2]
- 更新至 https://github.com/containers/buildah/tree/release-1.33(https://github.com/containers/buildah/commit/997beea 的最新內容
- 解決：RHEL-28725
cockpit-podman [84.1-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 的更新
- 相關：Jira:RHEL-25557
[84-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/84 的更新
- 相關：Jira:RHEL-2110
[83-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/83 的更新
- 相關：Jira:RHEL-2110
[82-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/82 的更新
- 相關：Jira:RHEL-2110
[81-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/81 的更新
- 相關：Jira:RHEL-2110
[80-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/80 的更新
- 相關：Jira:RHEL-2110
[79-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/79 的更新
- 相關：Jira:RHEL-2110
[78-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/78 的更新
- 相關：Jira:RHEL-2110
[77-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/77 的更新
- 相關：Jira:RHEL-2110
[75-1]
- https://github.com/cockpit-project/cockpit-podman/releases/tag/75 的更新
- 相關項目：#2176055
conmon [3:2.1.10-1]
- https://github.com/containers/conmon/releases/tag/v2.1.10 的更新
- 相關：Jira:RHEL-2110
[3:2.1.8-1]
- https://github.com/containers/conmon/releases/tag/v2.1.8 的更新
- 相關項目：#2176055
containernetworking-plugins [1:1.4.0-2]
- 重建
- 解決：RHEL-18390
[1:1.4.0-1]
- https://github.com/containernetworking/plugins/releases/tag/v1.4.0 的更新
- 相關：Jira:RHEL-2110
container-common [2:1-81.0.1]
- 已更新移除的參照 [Orabug：33473101] (Alex Burmashev)
- 調整 registries.conf (Nikita Gerasimov)
- 移除對 RedHat 登錄檔的參照 (Nikita Gerasimov)
[2:1-81]
- 從 Pyxis 更新簡稱
- 相關：Jira:RHEL-2110
[2:1-80]
- 升級版本以保留升級路徑
- 解決：Jira:RHEL-12277
container-selinux [2:2.229.0-2]
- 為 RHEL8 和更低版本正確移除 watch 陳述式
- 相關：Jira:RHEL-2110
[2:2.229.0-1]
- https://github.com/containers/container-selinux/releases/tag/v2.229.0 的更新
- 相關：Jira:RHEL-2110
[2:2.228.1-1]
- https://github.com/containers/container-selinux/releases/tag/v2.228.1 的更新
- 相關：Jira:RHEL-2110
[2:2.228.0-1]
- https://github.com/containers/container-selinux/releases/tag/v2.228.0 的更新
- 相關：Jira:RHEL-2110
[2:2.227.0-1]
- https://github.com/containers/container-selinux/releases/tag/v2.227.0 的更新
- 相關：Jira:RHEL-2110
[2:2.226.0-1]
- https://github.com/containers/container-selinux/releases/tag/v2.226.0 的更新
- 將 policycoreutils-python-utils 引入 python 時，移除其相依性
- 相關：Jira:RHEL-2110
[2:2.224.0-1]
- https://github.com/containers/container-selinux/releases/tag/v2.224.0 的更新
- 相關：Jira:RHEL-2110
[2:2.222.0-1]
- https://github.com/containers/container-selinux/releases/tag/v2.222.0 的更新
- 相關：Jira:RHEL-2110
criu [3.18-5]
- 重建以保留升級路徑
- 相關項目：RHEL-32671
[3.18-4]
- 切換至 8.9 中的 egg-info
- 相關項目：#2176055
[3.18-3]
- 移除 --progress-bar 選項
- 相關項目：#2176055
[3.18-2]
- 3.18 的更新
- 相關項目：#2176055
[3.17-1]
- 3.17 的更新
- 解決：#2175794
crun [1.14.3-2]
- 移除不再需要的 BR libgcrypt-devel
- 相關：Jira:RHEL-2110
[1.14.3-1]
- https://github.com/containers/crun/releases/tag/1.14.3 的更新
- 相關：Jira:RHEL-2110
[1.14.1-1]
- https://github.com/containers/crun/releases/tag/1.14.1 的更新
- 相關：Jira:RHEL-2110
[1.14-1]
- https://github.com/containers/crun/releases/tag/1.14 的更新
- 相關：Jira:RHEL-2110
[1.13-1]
- https://github.com/containers/crun/releases/tag/1.13 的更新
- 相關：Jira:RHEL-2110
[1.12-1]
- https://github.com/containers/crun/releases/tag/1.12 的更新
- 相關：Jira:RHEL-2110
[1.11.2-1]
- https://github.com/containers/crun/releases/tag/1.11.2 的更新
- 相關：Jira:RHEL-2110
[1.11.1-1]
- https://github.com/containers/crun/releases/tag/1.11.1 的更新
- 相關：Jira:RHEL-2110
[1.11-1]
- https://github.com/containers/crun/releases/tag/1.11 的更新
- 相關：Jira:RHEL-2110
[1.9.2-1]
- https://github.com/containers/crun/releases/tag/1.9.2 的更新
- 相關：Jira:RHEL-2110
[1.9.1-1]
- https://github.com/containers/crun/releases/tag/1.9.1 的更新
- 相關：Jira:RHEL-2110
[1.9-1]
- https://github.com/containers/crun/releases/tag/1.9 的更新
- 相關：Jira:RHEL-2110
fuse-overlayfs [1.13-1]
- https://github.com/containers/fuse-overlayfs/releases/tag/v1.13 的更新
- 相關：Jira:RHEL-2110
libslirp [4.4.0-2]
- 重建以保留升級路徑 8.9 -> 8.10
- 相關項目：RHEL-32671
netavark [2:1.10.3-1]
- https://github.com/containers/netavark/releases/tag/v1.10.3 的更新
- 相關：Jira:RHEL-2110
[2:1.10.2-1]
- https://github.com/containers/netavark/releases/tag/v1.10.2 的更新
- 相關：Jira:RHEL-2110
[2:1.10.1-1]
- https://github.com/containers/netavark/releases/tag/v1.10.1 的更新
- 相關：Jira:RHEL-2110
[2:1.10.0-1]
- https://github.com/containers/netavark/releases/tag/v1.10.0 的更新
- 相關：Jira:RHEL-2110
[2:1.9.0-1]
- https://github.com/containers/netavark/releases/tag/v1.9.0 的更新
- 相關：Jira:RHEL-2110
[2:1.8.0-2]
- 修正 systemd 單位的目錄
- 相關：Jira:RHEL-2110
[2:1.8.0-1]
- https://github.com/containers/netavark/releases/tag/v1.8.0 的更新
- 相關：Jira:RHEL-2110
oci-seccomp-bpf-hook [1.2.10-1]
- https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10 的更新
- 相關：Jira:RHEL-2110
podman [4:4.9.4-3.0.1]
- 在容器啟動時而非建立時新增裝置
[4:4.9.4-3]
- BR：/usr/bin/man
- 相關：RHEL-28727
[4:4.9.4-2]
- 更新至 https://github.com/containers/podman/tree/v4.9-rhel(https://github.com/containers/podman/commit/6464b2c 的最新內容
- 解決：RHEL-28727
python-podman [4.9.0-1]
- https://github.com/containers/podman-py/releases/tag/v4.9.0 的更新
- 相關：Jira:RHEL-2110
[4.8.2-1]
- https://github.com/containers/podman-py/releases/tag/v4.8.2 的更新
- 相關：Jira:RHEL-2110
[4.8.0.post1-1]
- https://github.com/containers/podman-py/releases/tag/v4.8.0.post1 的更新
- 相關：Jira:RHEL-2110
[4.7.0-1]
- https://github.com/containers/podman-py/releases/tag/v4.7.0 的更新
- 相關：Jira:RHEL-2110
runc skopeo [2:1.14.3-2]
- 更新至 https://github.com/containers/skopeo/tree/release-1.14(https://github.com/containers/skopeo/commit/5f2b9af 的最新內容
- 解決：RHEL-28728
[2:1.14.3-1]
- 更新至 https://github.com/containers/skopeo/tree/release-1.14(https://github.com/containers/skopeo/commit/4a2bc3a 的最新內容
- 解決：RHEL-28226
slirp4netns [1.2.3-1]
- https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3 的更新
- 相關：Jira:RHEL-2110
[1.2.2-1]
- https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2 的更新
- 相關：Jira:RHEL-2110
udica [0.2.6-21]
- 升級版本以保留更新路徑
- 解決：RHEL-32671
[0.2.6-20]
- 升級版本以保留更新路徑
- 相關項目：#2139052
Tenable 已直接從 Oracle Linux 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
更新受影響的套件。另請參閱
Plugin 詳細資訊
嚴重性: Medium
ID: 200721
檔案名稱: oraclelinux_ELSA-2024-3968.nasl
版本: 1.1
類型: local
代理程式: unix
已發布: 2024/6/19
已更新: 2024/6/19
支援的感應器: Frictionless Assessment Agent, Nessus Agent, Nessus
風險資訊
VPR
風險因素: Medium
分數: 4.4
CVSS v2
風險因素: Medium
基本分數: 5
時間分數: 3.7
媒介: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 評分資料來源: CVE-2024-28176
CVSS v3
風險因素: Medium
基本分數: 4.9
時間分數: 4.3
媒介: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
時間媒介: CVSS:3.0/E:U/RL:O/RC:C
弱點資訊
CPE: p-cpe:/a:oracle:linux:containernetworking-plugins, p-cpe:/a:oracle:linux:aardvark-dns, p-cpe:/a:oracle:linux:podman-docker, cpe:/o:oracle:linux:8, p-cpe:/a:oracle:linux:podman-plugins, p-cpe:/a:oracle:linux:runc, p-cpe:/a:oracle:linux:oci-seccomp-bpf-hook, p-cpe:/a:oracle:linux:crun, cpe:/a:oracle:linux:8::appstream, p-cpe:/a:oracle:linux:libslirp, p-cpe:/a:oracle:linux:criu, p-cpe:/a:oracle:linux:libslirp-devel, p-cpe:/a:oracle:linux:podman-catatonit, p-cpe:/a:oracle:linux:podman-gvproxy, p-cpe:/a:oracle:linux:container-selinux, p-cpe:/a:oracle:linux:netavark, p-cpe:/a:oracle:linux:buildah, p-cpe:/a:oracle:linux:python3-criu, p-cpe:/a:oracle:linux:skopeo-tests, p-cpe:/a:oracle:linux:conmon, p-cpe:/a:oracle:linux:crit, p-cpe:/a:oracle:linux:containers-common, p-cpe:/a:oracle:linux:cockpit-podman, p-cpe:/a:oracle:linux:slirp4netns, cpe:/a:oracle:linux:8:10:appstream_base, p-cpe:/a:oracle:linux:podman, p-cpe:/a:oracle:linux:criu-libs, p-cpe:/a:oracle:linux:python3-podman, p-cpe:/a:oracle:linux:fuse-overlayfs, p-cpe:/a:oracle:linux:buildah-tests, p-cpe:/a:oracle:linux:podman-tests, p-cpe:/a:oracle:linux:podman-remote, p-cpe:/a:oracle:linux:udica, p-cpe:/a:oracle:linux:skopeo, p-cpe:/a:oracle:linux:criu-devel
必要的 KB 項目: Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list, Host/local_checks_enabled
可輕鬆利用: No known exploits are available
修補程式發佈日期: 2024/6/18
弱點發布日期: 2024/3/7
參考資訊
CVE: CVE-2024-28176, CVE-2024-28180