The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9454 advisory.

    [5.2.2-9.0.1]
    - Add devices on container startup, not on creation
    - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
    - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

    [4:5.2.2-9]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/6df7dfb)
    - Resolves: RHEL-61847

    [4:5.2.2-8]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/c03b5f3)
    - Resolves: RHEL-61667

    [4:5.2.2-7]
    - attempt to fix the TMT testing pipeline
    - Resolves: RHEL-59714

    [4:5.2.2-6]
    - podman gating: test CNI, thanks to Ed Santiago
    - Resolves: RHEL-61249

    [4:5.2.2-5]
    - bump Epoch to 4
    - Resolves: RHEL-60963

    [2:5.2.2-4]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/8e693ce)
    - Resolves: RHEL-60963

    [2:5.2.2-3]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/5f2c188)
    - Resolves: RHEL-59703

    [2:5.2.2-2]
    - Add cni build tag to podman build
    - Resolves: RHEL-59714

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 9 : podman (ELSA-2024-9454)

medium Nessus Plugin ID 211667

Version 1.1