The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0531 advisory.

    buildah     [1.16.7-4.0.1]
    - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)

    [1.16.7-4]
    - update to the latest content of https://github.com/containers/buildah/tree/release-1.16       (https://github.com/containers/buildah/commit/aaed66b)
    - Related: #1888571

    [1.16.7-3]
    - revert back to buildah-1.16 for the quarterly release
    - Related: #1888571

    [1.19.0-2]
    - bump version to refrect buildah upgrade
    - Related: #1888571

    [1.16.7-2]
    - bump to release-1.19 branch
    - Related: #1888571

    [1.16.5-5]
    - update to the latest content of https://github.com/containers/buildah/tree/release-1.16       (https://github.com/containers/buildah/commit/56ed75b)
    - Related: #1888571

    [1.16.5-4]
    - simplify spec file
    - use short commit ID in tarball name
    - Related: #1888571

    [1.16.5-3]
    - update to the latest content of https://github.com/containers/buildah/tree/release-1.16       (https://github.com/containers/buildah/commit/9e02bf9)
    - Related: #1888571

    [1.16.5-2]
    - use shortcommit ID in branch tarball name
    - Related: #1888571

    [1.16.5-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Related: #1888571

    cockpit-podman     [27.1-3]
    - run much more tests - patch from Matej Marusak
    - Related: #1888571

    [27.1-2]
    - gating tests - always set VM password
    - Related: #1888571

    [27.1-1]
    - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/27.1
    - Related: #1888571

    [27-1]
    - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/27
    - Related: #1888571

    [26-1]
    - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/26
    - Related: #1888571

    [25-5]
    - remove redundant patch
    - Related: #1888571

    [25-4]
    - replace docker.io with quay.io for gating tests due do       docker.io new pull rate limit requirements
    - Related: #1888571

    [25-3]
    - test: Cleanup images before pulling the ones we need - thanks to Matej Marusak
    - Related: #1888571

    [25-2]
    - remove hack in tests
    - add LICENSE
    - Related: #1888571

    [25-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Related: #1888571

    conmon     [2:2.0.22-3]
    - exclude i686 as golang is not suppoerted there
    - Related: #1888571

    [2:2.0.22-2]
    - add BR: golang, go-md2man
    - add man pages
    - Related: #1888571

    [2:2.0.22-1]
    - update to https://github.com/containers/conmon/releases/tag/v2.0.22
    - Related: #1888571

    [2:2.0.21-3]
    - simplify spec
    - Related: #1888571

    [2:2.0.21-2]
    - be sure to harden the linked binary
    - compile with debuginfo enabled
    - Related: #1888571

    [2:2.0.21-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Related: #1888571

    containernetworking-plugins     [0.9.0-1]
    - update to https://github.com/containernetworking/plugins/releases/tag/v0.9.0
    - Related: #1888571

    container-selinux     [2:2.155.0-1]
    - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
    - Related: #1888571

    [2:2.154.0-1]
    - update to       https://github.com/containers/container-selinux/releases/tag/v2.154.0
    - Related: #1888571

    [2:2.153.0-1]
    - update to       https://github.com/containers/container-selinux/releases/tag/v2.153.0
    - Related: #1888571

    [2:2.152.0-1]
    - update to       https://github.com/containers/container-selinux/releases/tag/v2.152.0
    - Related: #1888571

    [2:2.151.0-1]
    - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
    - Related: #1888571

    [2:2.150.0-1]
    - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
    - Related: #1888571

    [2:2.145.0-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Resolves: #1873064

    criu     [3.15-1]
    - update to https://github.com/checkpoint-restore/criu/releases/tag/v3.15
    - Related: #1888571

    [3.14-2]
    - fix 'Need to fix bugs found by coverity.'
    - Related: #1821193

    [3.14-1]
    - synchronize containter-tools 8.3.0 with 8.2.1
    - Related: #1821193

    crun     [0.16-2]
    - exclude i686 because of build failures
    - Related: #1888571

    [0.16-1]
    - update to https://github.com/containers/crun/releases/tag/0.16
    - Related: #1888571

    [0.15.1-1]
    - update to https://github.com/containers/crun/releases/tag/0.15.1
    - Related: #1888571

    [0.15-2]
    - backport 'exec: check read bytes from sync' (gscrivan@redhat.com)       (https://github.com/containers/crun/issues/511)
    - Related: #1888571

    [0.15-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Related: #1888571

    fuse-overlayfs     [1.3.0-2]
    - disable openat2 syscall again - still unsupported in current RHEL8 kernel
    - Resolves: #1921863

    [1.3.0-1]
    - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.3.0
    - Related: #1888571

    [1.2.0-3]
    - be sure to harden the linked binary
    - Related: #1888571

    [1.2.0-2]
    - ensure fuse module is loaded
    - Related: #1888571

    [1.2.0-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Related: #1888571

    libslirp     oci-seccomp-bpf-hook     [1.2.0-1]
    - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.0
    - Related: #1888571

    podman     [2.2.1-7.0.1]
    - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)

    [2.2.1-7]
    - Resolves: #1925928 - Fix varlink GetVersion()
    - Upstream PR: https://github.com/containers/podman/pull/9274

    [2.2.1-6]
    - update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel       (https://github.com/containers/podman/commit/1741f15)
    - Related: #1888571

    [2.2.1-5]
    - update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel       (https://github.com/containers/podman/commit/b5bc6a7)
    - Related: #1877188

    [2.2.1-4]
    - add Requires: oci-runtime
    - Related: #1888571

    [2.2.1-3]
    - update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel       (https://github.com/containers/podman/commit/14c35f6)
    - Related: #1888571

    [2.2.1-2]
    - update to https://github.com/containers/dnsname/releases/tag/v1.1.1

    [2.2.1-1]
    - update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel       (https://github.com/containers/podman/commit/a0d478e)
    - Related: #1888571

    [2.2.0-2]
    - attempt to fix gatng tests
    - Related: #1888571

    [2.2.0-1]
    - update to https://github.com/containers/podman/releases/tag/v2.2.0
    - Related: #1888571

    [2.1.1-3]
    - attempt to fix linker error with golang-1.15
    - add Requires: httpd-tools to tests, needed to work around       missing htpasswd in docker registry image, thanks to Ed Santiago
    - Related: #1888571

    [2.1.1-2]
    - update to the latest content of https://github.com/containers/podman/tree/v2.1.1-rhel       (https://github.com/containers/podman/commit/450615a)
    - Resolves: #1873204
    - Resolves: #1884668

    [2.1.1-1]
    - update podman to 2.1.1-rhel
    - Resolves: #1743687
    - Resolves: #1811570
    - Resolves: #1869322
    - Resolves: #1678546
    - Resolves: #1853455
    - Resolves: #1874271

    python-podman-api     [1.2.0-0.2.gitd0a45fe]
    - revert update to 1.6.0 due to new python3-pbr dependency which       is not in RHEL
    - Related: RHELPLAN-25139

    [1.2.0-0.1.gitd0a45fe]
    - Initial package

    runc     [1.0.0-70.rc92]
    - add Provides: oci-runtime = 1
    - Related: #1888571

    [1.0.0-69.rc92]
    - still use ExcludeArch as go_arches macro is broken for 8.4
    - Related: #1888571

    skopeo     [1:1.2.0-9.0.1]
    - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)
    - Add oracle registry into the conf file [Orabug: 29845934 31306708]

    [1:1.2.0-9]
    - upload proper source tarball
    - Related: #1888571

    [1:1.2.0-8]
    - revert back to version aimed at 8.3.1 - skopeo-1.2.0
    - also downgrade versions of vendored libraries
    - Related: #1888571

    [1:1.2.1-1]
    - update vendored component versions
    - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2       (https://github.com/containers/skopeo/commit/2e90a8a)
    - Related: #1888571

    [1:1.2.0-6]
    - always build with debuginfo
    - use less verbose output when compiling
    - Related: #1888571

    [1:1.2.0-5]
    - re-sync config files
    - assure events_logger = 'file'
    - Related: #1888571

    [1:1.2.0-4]
    - change default logging mechanism to use for container engine events       in containers.conf to be events_logger = 'file' - it should fix       RHEL gating tests for podman nonroot (thanks to Dan Walsh)
    - Related: #1888571

    [1:1.2.0-3]
    - simplify spec file
    - use short commit ID in tarball name
    - Related: #1888571

    [1:1.2.0-2]
    - use shortcommit ID in branch tarball name
    - Related: #1888571

    [1:1.2.0-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Related: #1888571

    slirp4netns     [1.1.8-1]
    - update to       https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
    - Related: #1888571

    [1.1.7-2]
    - exclude i686 because of build failures
    - Related: #1888571

    [1.1.7-1]
    - update to       https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
    - Related: #1888571

    [1.1.6-2]
    - - be sure to harden the linked binary
    - Related: #1888571

    [1.1.6-1]
    - update to       https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
    - Related: #1888571

    udica     [0.2.4-1]
    - update to https://github.com/containers/udica/releases/tag/v0.2.4
    - Related: #1888571

    [0.2.3-1]
    - synchronize with stream-container-tools-rhel8-rhel-8.4.0
    - Related: #1888571

    [0.2.2-1]
    - https://github.com/containers/udica/releases/tag/v0.2.2
    - Related: #1821193

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : container-tools:ol8 (ELSA-2021-0531)

medium Nessus Plugin ID 146640

Version 1.9

Version 1.8

Version 1.7

Version 1.9 Nov 2, 2024, 5:10 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202411020510
Version 1.8 Oct 23, 2024, 3:11 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410230311
Version 1.7 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046