The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4246 advisory.

    aardvark-dns     [2:1.10.0-1]
    - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
    - Related: Jira:RHEL-2110

    [2:1.9.0-1]
    - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
    - Related: Jira:RHEL-2110

    [2:1.8.0-1]
    - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
    - Related: Jira:RHEL-2110

    buildah     [2:1.33.8-1]
    - update to the latest content of https://github.com/containers/buildah/tree/release-1.33       (https://github.com/containers/buildah/commit/b65a814)
    - Resolves: RHEL-40850


    cockpit-podman     conmon     containernetworking-plugins     containers-common     container-selinux     criu     [3.18-5]
    - rebuild to preserve upgrade path
    - Related: RHEL-32671

    crun     fuse-overlayfs     libslirp     [4.4.0-2]
    - rebuild to preserve upgrade path 8.9 -> 8.10
    - Related: RHEL-32671

    netavark     oci-seccomp-bpf-hook     podman     [4.9.4-4.0.1]
    - Add devices on container startup, not on creation

    [4:4.9.4-4]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/1a6dca2)
    - Resolves: RHEL-40851

    python-podman     runc     skopeo     [2:1.14.4-1]
    - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14       (https://github.com/containers/skopeo/commit/78d9c9a)
    - Resolves: RHEL-40852

    slirp4netns     udica     [0.2.6-21]
    - bump release to preserve update path
    - Resolves: RHEL-32671

    [0.2.6-20]
    - bump release to preserve update path
    - Related: #2139052

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : container-tools (ELSA-2024-4246)

high Nessus Plugin ID 201852

Version 1.5