遠端 Oracle Linux 8 主機中安裝的套件受到 ELSA-2024-3968 公告中提及的多個弱點影響。

    aardvark-dns [2:1.10.0-1]
    - https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 的更新
    - 相關：Jira:RHEL-2110

    [2:1.9.0-1]
    - https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 的更新
    - 相關：Jira:RHEL-2110

    [2:1.8.0-1]
    - https://github.com/containers/aardvark-dns/releases/tag/v1.8.0 的更新
    - 相關：Jira:RHEL-2110

    buildah [2:1.33.7-2]
    - 更新至 https://github.com/containers/buildah/tree/release-1.33(https://github.com/containers/buildah/commit/997beea 的最新內容
    - 解決：RHEL-28725

    cockpit-podman [84.1-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 的更新
    - 相關：Jira:RHEL-25557

    [84-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/84 的更新
    - 相關：Jira:RHEL-2110

    [83-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/83 的更新
    - 相關：Jira:RHEL-2110

    [82-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/82 的更新
    - 相關：Jira:RHEL-2110

    [81-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/81 的更新
    - 相關：Jira:RHEL-2110

    [80-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/80 的更新
    - 相關：Jira:RHEL-2110

    [79-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/79 的更新
    - 相關：Jira:RHEL-2110

    [78-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/78 的更新
    - 相關：Jira:RHEL-2110

    [77-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/77 的更新
    - 相關：Jira:RHEL-2110

    [75-1]
    - https://github.com/cockpit-project/cockpit-podman/releases/tag/75 的更新
    - 相關項目：#2176055

    conmon [3:2.1.10-1]
    - https://github.com/containers/conmon/releases/tag/v2.1.10 的更新
    - 相關：Jira:RHEL-2110

    [3:2.1.8-1]
    - https://github.com/containers/conmon/releases/tag/v2.1.8 的更新
    - 相關項目：#2176055

    containernetworking-plugins [1:1.4.0-2]
    - 重建
    - 解決：RHEL-18390

    [1:1.4.0-1]
    - https://github.com/containernetworking/plugins/releases/tag/v1.4.0 的更新
    - 相關：Jira:RHEL-2110

    container-common [2:1-81.0.1]
    - 已更新移除的參照 [Orabug：33473101] (Alex Burmashev)
    - 調整 registries.conf (Nikita Gerasimov)
    - 移除對 RedHat 登錄檔的參照 (Nikita Gerasimov)

    [2:1-81]
    - 從 Pyxis 更新簡稱
    - 相關：Jira:RHEL-2110

    [2:1-80]
    - 升級版本以保留升級路徑
    - 解決：Jira:RHEL-12277

    container-selinux [2:2.229.0-2]
    - 為 RHEL8 和更低版本正確移除 watch 陳述式
    - 相關：Jira:RHEL-2110

    [2:2.229.0-1]
    - https://github.com/containers/container-selinux/releases/tag/v2.229.0 的更新
    - 相關：Jira:RHEL-2110

    [2:2.228.1-1]
    - https://github.com/containers/container-selinux/releases/tag/v2.228.1 的更新
    - 相關：Jira:RHEL-2110

    [2:2.228.0-1]
    - https://github.com/containers/container-selinux/releases/tag/v2.228.0 的更新
    - 相關：Jira:RHEL-2110

    [2:2.227.0-1]
    - https://github.com/containers/container-selinux/releases/tag/v2.227.0 的更新
    - 相關：Jira:RHEL-2110

    [2:2.226.0-1]
    - https://github.com/containers/container-selinux/releases/tag/v2.226.0 的更新
    - 將 policycoreutils-python-utils 引入 python 時，移除其相依性
    - 相關：Jira:RHEL-2110

    [2:2.224.0-1]
    - https://github.com/containers/container-selinux/releases/tag/v2.224.0 的更新
    - 相關：Jira:RHEL-2110

    [2:2.222.0-1]
    - https://github.com/containers/container-selinux/releases/tag/v2.222.0 的更新
    - 相關：Jira:RHEL-2110

    criu [3.18-5]
    - 重建以保留升級路徑
    - 相關項目：RHEL-32671

    [3.18-4]
    - 切換至 8.9 中的 egg-info
    - 相關項目：#2176055

    [3.18-3]
    - 移除 --progress-bar 選項
    - 相關項目：#2176055

    [3.18-2]
    - 3.18 的更新
    - 相關項目：#2176055

    [3.17-1]
    - 3.17 的更新
    - 解決：#2175794

    crun [1.14.3-2]
    - 移除不再需要的 BR libgcrypt-devel
    - 相關：Jira:RHEL-2110

    [1.14.3-1]
    - https://github.com/containers/crun/releases/tag/1.14.3 的更新
    - 相關：Jira:RHEL-2110

    [1.14.1-1]
    - https://github.com/containers/crun/releases/tag/1.14.1 的更新
    - 相關：Jira:RHEL-2110

    [1.14-1]
    - https://github.com/containers/crun/releases/tag/1.14 的更新
    - 相關：Jira:RHEL-2110

    [1.13-1]
    - https://github.com/containers/crun/releases/tag/1.13 的更新
    - 相關：Jira:RHEL-2110

    [1.12-1]
    - https://github.com/containers/crun/releases/tag/1.12 的更新
    - 相關：Jira:RHEL-2110

    [1.11.2-1]
    - https://github.com/containers/crun/releases/tag/1.11.2 的更新
    - 相關：Jira:RHEL-2110

    [1.11.1-1]
    - https://github.com/containers/crun/releases/tag/1.11.1 的更新
    - 相關：Jira:RHEL-2110

    [1.11-1]
    - https://github.com/containers/crun/releases/tag/1.11 的更新
    - 相關：Jira:RHEL-2110

    [1.9.2-1]
    - https://github.com/containers/crun/releases/tag/1.9.2 的更新
    - 相關：Jira:RHEL-2110

    [1.9.1-1]
    - https://github.com/containers/crun/releases/tag/1.9.1 的更新
    - 相關：Jira:RHEL-2110

    [1.9-1]
    - https://github.com/containers/crun/releases/tag/1.9 的更新
    - 相關：Jira:RHEL-2110

    fuse-overlayfs [1.13-1]
    - https://github.com/containers/fuse-overlayfs/releases/tag/v1.13 的更新
    - 相關：Jira:RHEL-2110

    libslirp [4.4.0-2]
    - 重建以保留升級路徑 8.9 -> 8.10
    - 相關項目：RHEL-32671

    netavark [2:1.10.3-1]
    - https://github.com/containers/netavark/releases/tag/v1.10.3 的更新
    - 相關：Jira:RHEL-2110

    [2:1.10.2-1]
    - https://github.com/containers/netavark/releases/tag/v1.10.2 的更新
    - 相關：Jira:RHEL-2110

    [2:1.10.1-1]
    - https://github.com/containers/netavark/releases/tag/v1.10.1 的更新
    - 相關：Jira:RHEL-2110

    [2:1.10.0-1]
    - https://github.com/containers/netavark/releases/tag/v1.10.0 的更新
    - 相關：Jira:RHEL-2110

    [2:1.9.0-1]
    - https://github.com/containers/netavark/releases/tag/v1.9.0 的更新
    - 相關：Jira:RHEL-2110

    [2:1.8.0-2]
    - 修正 systemd 單位的目錄
    - 相關：Jira:RHEL-2110

    [2:1.8.0-1]
    - https://github.com/containers/netavark/releases/tag/v1.8.0 的更新
    - 相關：Jira:RHEL-2110

    oci-seccomp-bpf-hook [1.2.10-1]
    - https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10 的更新
    - 相關：Jira:RHEL-2110

    podman [4:4.9.4-3.0.1]
    - 在容器啟動時而非建立時新增裝置

    [4:4.9.4-3]
    - BR：/usr/bin/man
    - 相關：RHEL-28727

    [4:4.9.4-2]
    - 更新至 https://github.com/containers/podman/tree/v4.9-rhel(https://github.com/containers/podman/commit/6464b2c 的最新內容
    - 解決：RHEL-28727

    python-podman [4.9.0-1]
    - https://github.com/containers/podman-py/releases/tag/v4.9.0 的更新
    - 相關：Jira:RHEL-2110

    [4.8.2-1]
    - https://github.com/containers/podman-py/releases/tag/v4.8.2 的更新
    - 相關：Jira:RHEL-2110

    [4.8.0.post1-1]
    - https://github.com/containers/podman-py/releases/tag/v4.8.0.post1 的更新
    - 相關：Jira:RHEL-2110

    [4.7.0-1]
    - https://github.com/containers/podman-py/releases/tag/v4.7.0 的更新
    - 相關：Jira:RHEL-2110

    runc skopeo [2:1.14.3-2]
    - 更新至 https://github.com/containers/skopeo/tree/release-1.14(https://github.com/containers/skopeo/commit/5f2b9af 的最新內容
    - 解決：RHEL-28728

    [2:1.14.3-1]
    - 更新至 https://github.com/containers/skopeo/tree/release-1.14(https://github.com/containers/skopeo/commit/4a2bc3a 的最新內容
    - 解決：RHEL-28226

    slirp4netns [1.2.3-1]
    - https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3 的更新
    - 相關：Jira:RHEL-2110

    [1.2.2-1]
    - https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2 的更新
    - 相關：Jira:RHEL-2110

    udica [0.2.6-21]
    - 升級版本以保留更新路徑
    - 解決：RHEL-32671

    [0.2.6-20]
    - 升級版本以保留更新路徑
    - 相關項目：#2139052

Tenable 已直接從 Oracle Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

偵測

Oracle Linux 8：container-tools:ol8 (ELSA-2024-3968)

medium Nessus Plugin ID 200721

版本 1.1