Oracle Linux 8：container-tools:ol8 (ELSA-2024-3968)
medium Nessus 插件 ID 200721
语言：
简介
远程 Oracle Linux 主机缺少一个或多个安全更新。描述
远程 Oracle Linux 8 主机上安装的多个程序包受到 ELSA-2024-3968 公告中提及的多个漏洞影响。aardvark-dns [2:1.10.0-1]
- 更新到 https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
- 相关：Jira:RHEL-2110
[2:1.9.0-1]
- 更新到 https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
- 相关：Jira:RHEL-2110
[2:1.8.0-1]
- 更新到 https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
- 相关：Jira:RHEL-2110
buildah [2:1.33.7-2]
- 更新到 https://github.com/containers/buildah/tree/release-1.33(https://github.com/containers/buildah/commit/997beea) 的最新内容
- 解决：RHEL-28725
cockpit-podman [84.1-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
- 相关：Jira:RHEL-25557
[84-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/84
- 相关：Jira:RHEL-2110
[83-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/83
- 相关：Jira:RHEL-2110
[82-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/82
- 相关：Jira:RHEL-2110
[81-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/81
- 相关：Jira:RHEL-2110
[80-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/80
- 相关：Jira:RHEL-2110
[79-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/79
- 相关：Jira:RHEL-2110
[78-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/78
- 相关：Jira:RHEL-2110
[77-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/77
- 相关：Jira:RHEL-2110
[75-1]
- 更新到 https://github.com/cockpit-project/cockpit-podman/releases/tag/75
- 相关：#2176055
conmon [3:2.1.10-1]
- 更新到 https://github.com/containers/conmon/releases/tag/v2.1.10
- 相关：Jira:RHEL-2110
[3:2.1.8-1]
- 更新到 https://github.com/containers/conmon/releases/tag/v2.1.8
- 相关：#2176055
containernetworking-plugins [1:1.4.0-2]
- 重建
- 解决了：RHEL-18390
[1:1.4.0-1]
- 更新到 https://github.com/containernetworking/plugins/releases/tag/v1.4.0
- 相关：Jira:RHEL-2110
containers-common [2:1-81.0.1]
- 更新了删除的引用 [Orabug：33473101] (Alex Burmashev)
- 调整 registries.conf (Nikita Gerasimov)
- 删除对 RedHat 注册表的引用 (Nikita Gerasimov)
[2:1-81]
- 更新 Pyxis 中的短名称
- 相关：Jira:RHEL-2110
[2:1-80]
- 升级版本以保留升级路径
- 解决了：Jira:RHEL-12277
container-selinux [2:2.229.0-2]
- 正确删除 RHEL8 和更低版本的监视语句
- 相关：Jira:RHEL-2110
[2:2.229.0-1]
- 更新到 https://github.com/containers/container-selinux/releases/tag/v2.229.0
- 相关：Jira:RHEL-2110
[2:2.228.1-1]
- 更新到 https://github.com/containers/container-selinux/releases/tag/v2.228.1
- 相关：Jira:RHEL-2110
[2:2.228.0-1]
- 更新到 https://github.com/containers/container-selinux/releases/tag/v2.228.0
- 相关：Jira:RHEL-2110
[2:2.227.0-1]
- 更新到 https://github.com/containers/container-selinux/releases/tag/v2.227.0
- 相关：Jira:RHEL-2110
[2:2.226.0-1]
- 更新到 https://github.com/containers/container-selinux/releases/tag/v2.226.0
- 删除对 policycoreutils-python-utils 的依存关系，因为它引入 python
- 相关：Jira:RHEL-2110
[2:2.224.0-1]
- 更新到 https://github.com/containers/container-selinux/releases/tag/v2.224.0
- 相关：Jira:RHEL-2110
[2:2.222.0-1]
- 更新到 https://github.com/containers/container-selinux/releases/tag/v2.222.0
- 相关：Jira:RHEL-2110
criu [3.18-5]
- 重新构建以保留升级路径
- 相关：RHEL-32671
[3.18-4]
- 切换到 8.9 上的 egg-info
- 相关：#2176055
[3.18-3]
- 删除 "--progress-bar" 选项。
- 相关：#2176055
[3.18-2]
- 更新到 3.18
- 相关：#2176055
[3.17-1]
- 更新到 3.17
- 已解决：#2175794
crun [1.14.3-2]
- 删除不再需要的 BR libgcrypt-devel
- 相关：Jira:RHEL-2110
[1.14.3-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.14.3
- 相关：Jira:RHEL-2110
[1.14.1-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.14.1
- 相关：Jira:RHEL-2110
[1.14-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.14
- 相关：Jira:RHEL-2110
[1.13-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.13
- 相关：Jira:RHEL-2110
[1.12-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.12
- 相关：Jira:RHEL-2110
[1.11.2-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.11.2
- 相关：Jira:RHEL-2110
[1.11.1-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.11.1
- 相关：Jira:RHEL-2110
[1.11-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.11
- 相关：Jira:RHEL-2110
[1.9.2-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.9.2
- 相关：Jira:RHEL-2110
[1.9.1-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.9.1
- 相关：Jira:RHEL-2110
[1.9-1]
- 更新到 https://github.com/containers/crun/releases/tag/1.9
- 相关：Jira:RHEL-2110
fuse-overlayfs [1.13-1]
- 更新到 https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
- 相关：Jira:RHEL-2110
libslirp [4.4.0-2]
- 重新构建以保留升级路径 8.9 -> 8.10
- 相关：RHEL-32671
netavark [2:1.10.3-1]
- 更新到 https://github.com/containers/netavark/releases/tag/v1.10.3
- 相关：Jira:RHEL-2110
[2:1.10.2-1]
- 更新到 https://github.com/containers/netavark/releases/tag/v1.10.2
- 相关：Jira:RHEL-2110
[2:1.10.1-1]
- 更新到 https://github.com/containers/netavark/releases/tag/v1.10.1
- 相关：Jira:RHEL-2110
[2:1.10.0-1]
- 更新到 https://github.com/containers/netavark/releases/tag/v1.10.0
- 相关：Jira:RHEL-2110
[2:1.9.0-1]
- 更新到 https://github.com/containers/netavark/releases/tag/v1.9.0
- 相关：Jira:RHEL-2110
[2:1.8.0-2]
- 修复 systemd 单元的目录
- 相关：Jira:RHEL-2110
[2:1.8.0-1]
- 更新到 https://github.com/containers/netavark/releases/tag/v1.8.0
- 相关：Jira:RHEL-2110
oci-seccomp-bpf-hook [1.2.10-1]
- 更新到 https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
- 相关：Jira:RHEL-2110
podman [4:4.9.4-3.0.1]
- 在容器启动时添加设备，而不是在创建时添加
[4:4.9.4-3]
- BR：/usr/bin/man
- 相关：RHEL-28727
[4:4.9.4-2]
- 更新到 https://github.com/containers/podman/tree/v4.9-rhel(https://github.com/containers/podman/commit/6464b2c) 的最新内容
- 解决：RHEL-28727
python-podman [4.9.0-1]
- 更新到 https://github.com/containers/podman-py/releases/tag/v4.9.0
- 相关：Jira:RHEL-2110
[4.8.2-1]
- 更新到 https://github.com/containers/podman-py/releases/tag/v4.8.2
- 相关：Jira:RHEL-2110
[4.8.0.post1-1]
- 更新到 https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
- 相关：Jira:RHEL-2110
[4.7.0-1]
- 更新到 https://github.com/containers/podman-py/releases/tag/v4.7.0
- 相关：Jira:RHEL-2110
runc skopeo [2:1.14.3-2]
- 更新到 https://github.com/containers/skopeo/tree/release-1.14(https://github.com/containers/skopeo/commit/5f2b9af) 的最新内容
- 解决：RHEL-28728
[2:1.14.3-1]
- 更新到 https://github.com/containers/skopeo/tree/release-1.14(https://github.com/containers/skopeo/commit/4a2bc3a) 的最新内容
- 解决了：RHEL-28226
slirp4netns [1.2.3-1]
- 更新到 https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
- 相关：Jira:RHEL-2110
[1.2.2-1]
- 更新到 https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
- 相关：Jira:RHEL-2110
udica [0.2.6-21]
- 升级版本以保留更新路径
- 解决了：RHEL-32671
[0.2.6-20]
- 升级版本以保留更新路径
- 相关：#2139052
Tenable 已直接从 Oracle Linux 安全公告中提取上述描述块。
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
更新受影响的程序包。另见
插件详情
严重性: Medium
ID: 200721
文件名: oraclelinux_ELSA-2024-3968.nasl
版本: 1.1
类型: local
代理: unix
发布时间: 2024/6/19
最近更新时间: 2024/6/19
支持的传感器: Frictionless Assessment Agent, Nessus Agent, Nessus
风险信息
VPR
风险因素: Medium
分数: 4.4
CVSS v2
风险因素: Medium
基本分数: 5
时间分数: 3.7
矢量: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 分数来源: CVE-2024-28176
CVSS v3
风险因素: Medium
基本分数: 4.9
时间分数: 4.3
矢量: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
时间矢量: CVSS:3.0/E:U/RL:O/RC:C
漏洞信息
CPE: p-cpe:/a:oracle:linux:containernetworking-plugins, p-cpe:/a:oracle:linux:aardvark-dns, p-cpe:/a:oracle:linux:podman-docker, cpe:/o:oracle:linux:8, p-cpe:/a:oracle:linux:podman-plugins, p-cpe:/a:oracle:linux:runc, p-cpe:/a:oracle:linux:oci-seccomp-bpf-hook, p-cpe:/a:oracle:linux:crun, cpe:/a:oracle:linux:8::appstream, p-cpe:/a:oracle:linux:libslirp, p-cpe:/a:oracle:linux:criu, p-cpe:/a:oracle:linux:libslirp-devel, p-cpe:/a:oracle:linux:podman-catatonit, p-cpe:/a:oracle:linux:podman-gvproxy, p-cpe:/a:oracle:linux:container-selinux, p-cpe:/a:oracle:linux:netavark, p-cpe:/a:oracle:linux:buildah, p-cpe:/a:oracle:linux:python3-criu, p-cpe:/a:oracle:linux:skopeo-tests, p-cpe:/a:oracle:linux:conmon, p-cpe:/a:oracle:linux:crit, p-cpe:/a:oracle:linux:containers-common, p-cpe:/a:oracle:linux:cockpit-podman, p-cpe:/a:oracle:linux:slirp4netns, cpe:/a:oracle:linux:8:10:appstream_base, p-cpe:/a:oracle:linux:podman, p-cpe:/a:oracle:linux:criu-libs, p-cpe:/a:oracle:linux:python3-podman, p-cpe:/a:oracle:linux:fuse-overlayfs, p-cpe:/a:oracle:linux:buildah-tests, p-cpe:/a:oracle:linux:podman-tests, p-cpe:/a:oracle:linux:podman-remote, p-cpe:/a:oracle:linux:udica, p-cpe:/a:oracle:linux:skopeo, p-cpe:/a:oracle:linux:criu-devel
必需的 KB 项: Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list, Host/local_checks_enabled
易利用性: No known exploits are available
补丁发布日期: 2024/6/18
漏洞发布日期: 2024/3/7
参考资料信息
CVE: CVE-2024-28176, CVE-2024-28180