Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-3968

Опубликовано: 18 июн. 2024
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2024-3968: container-tools:ol8 bug fix and enhancement update (MODERATE)

aardvark-dns [2:1.10.0-1]

[2:1.9.0-1]

[2:1.8.0-1]

buildah [2:1.33.7-2]

cockpit-podman [84.1-1]

[84-1]

[83-1]

[82-1]

[81-1]

[80-1]

[79-1]

[78-1]

[77-1]

[75-1]

conmon [3:2.1.10-1]

[3:2.1.8-1]

containernetworking-plugins [1:1.4.0-2]

  • rebuild
  • Resolves: RHEL-18390

[1:1.4.0-1]

containers-common [2:1-81.0.1]

  • Updated removed references [Orabug: 33473101] (Alex Burmashev)
  • Adjust registries.conf (Nikita Gerasimov)
  • remove references to RedHat registry (Nikita Gerasimov)

[2:1-81]

  • Update shortnames from Pyxis
  • Related: Jira:RHEL-2110

[2:1-80]

  • bump release to preserve upgrade path
  • Resolves: Jira:RHEL-12277

container-selinux [2:2.229.0-2]

  • remove watch statements properly for RHEL8 and lower
  • Related: Jira:RHEL-2110

[2:2.229.0-1]

[2:2.228.1-1]

[2:2.228.0-1]

[2:2.227.0-1]

[2:2.226.0-1]

[2:2.224.0-1]

[2:2.222.0-1]

criu [3.18-5]

  • rebuild to preserve upgrade path
  • Related: RHEL-32671

[3.18-4]

  • switch to egg-info on 8.9
  • Related: #2176055

[3.18-3]

  • remove --progress-bar option
  • Related: #2176055

[3.18-2]

  • update to 3.18
  • Related: #2176055

[3.17-1]

  • update to 3.17
  • Resolves: #2175794

crun [1.14.3-2]

  • remove BR libgcrypt-devel, no longer needed
  • Related: Jira:RHEL-2110

[1.14.3-1]

[1.14.1-1]

[1.14-1]

[1.13-1]

[1.12-1]

[1.11.2-1]

[1.11.1-1]

[1.11-1]

[1.9.2-1]

[1.9.1-1]

[1.9-1]

fuse-overlayfs [1.13-1]

libslirp [4.4.0-2]

  • rebuild to preserve upgrade path 8.9 -> 8.10
  • Related: RHEL-32671

netavark [2:1.10.3-1]

[2:1.10.2-1]

[2:1.10.1-1]

[2:1.10.0-1]

[2:1.9.0-1]

[2:1.8.0-2]

  • fix directory for systemd units
  • Related: Jira:RHEL-2110

[2:1.8.0-1]

oci-seccomp-bpf-hook [1.2.10-1]

podman [4:4.9.4-3.0.1]

  • Add devices on container startup, not on creation

[4:4.9.4-3]

  • BR: /usr/bin/man
  • Related: RHEL-28727

[4:4.9.4-2]

python-podman [4.9.0-1]

[4.8.2-1]

[4.8.0.post1-1]

[4.7.0-1]

runc skopeo [2:1.14.3-2]

[2:1.14.3-1]

slirp4netns [1.2.3-1]

[1.2.2-1]

udica [0.2.6-21]

  • bump release to preserve update path
  • Resolves: RHEL-32671

[0.2.6-20]

  • bump release to preserve update path
  • Related: #2139052

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module container-tools:ol8 is enabled

aardvark-dns

1.10.0-1.module+el8.10.0+90298+77a9814d

buildah

1.33.7-2.module+el8.10.0+90352+16362864

buildah-tests

1.33.7-2.module+el8.10.0+90352+16362864

cockpit-podman

84.1-1.module+el8.10.0+90298+77a9814d

conmon

2.1.10-1.module+el8.10.0+90298+77a9814d

container-selinux

2.229.0-2.module+el8.10.0+90298+77a9814d

containernetworking-plugins

1.4.0-2.module+el8.10.0+90298+77a9814d

containers-common

1-81.0.1.module+el8.10.0+90298+77a9814d

crit

3.18-5.module+el8.10.0+90337+0d7b6e74

criu

3.18-5.module+el8.10.0+90337+0d7b6e74

criu-devel

3.18-5.module+el8.10.0+90337+0d7b6e74

criu-libs

3.18-5.module+el8.10.0+90337+0d7b6e74

crun

1.14.3-2.module+el8.10.0+90298+77a9814d

fuse-overlayfs

1.13-1.module+el8.10.0+90298+77a9814d

libslirp

4.4.0-2.module+el8.10.0+90337+0d7b6e74

libslirp-devel

4.4.0-2.module+el8.10.0+90337+0d7b6e74

netavark

1.10.3-1.module+el8.10.0+90298+77a9814d

oci-seccomp-bpf-hook

1.2.10-1.module+el8.10.0+90298+77a9814d

podman

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-catatonit

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-docker

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-gvproxy

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-plugins

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-remote

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-tests

4.9.4-3.0.1.module+el8.10.0+90352+16362864

python3-criu

3.18-5.module+el8.10.0+90337+0d7b6e74

python3-podman

4.9.0-1.module+el8.10.0+90298+77a9814d

runc

1.1.12-1.module+el8.10.0+90298+77a9814d

skopeo

1.14.3-2.module+el8.10.0+90337+0d7b6e74

skopeo-tests

1.14.3-2.module+el8.10.0+90337+0d7b6e74

slirp4netns

1.2.3-1.module+el8.10.0+90298+77a9814d

udica

0.2.6-21.module+el8.10.0+90337+0d7b6e74

Oracle Linux x86_64

Module container-tools:ol8 is enabled

aardvark-dns

1.10.0-1.module+el8.10.0+90298+77a9814d

buildah

1.33.7-2.module+el8.10.0+90352+16362864

buildah-tests

1.33.7-2.module+el8.10.0+90352+16362864

cockpit-podman

84.1-1.module+el8.10.0+90298+77a9814d

conmon

2.1.10-1.module+el8.10.0+90298+77a9814d

container-selinux

2.229.0-2.module+el8.10.0+90298+77a9814d

containernetworking-plugins

1.4.0-2.module+el8.10.0+90298+77a9814d

containers-common

1-81.0.1.module+el8.10.0+90298+77a9814d

crit

3.18-5.module+el8.10.0+90337+0d7b6e74

criu

3.18-5.module+el8.10.0+90337+0d7b6e74

criu-devel

3.18-5.module+el8.10.0+90337+0d7b6e74

criu-libs

3.18-5.module+el8.10.0+90337+0d7b6e74

crun

1.14.3-2.module+el8.10.0+90298+77a9814d

fuse-overlayfs

1.13-1.module+el8.10.0+90298+77a9814d

libslirp

4.4.0-2.module+el8.10.0+90337+0d7b6e74

libslirp-devel

4.4.0-2.module+el8.10.0+90337+0d7b6e74

netavark

1.10.3-1.module+el8.10.0+90298+77a9814d

oci-seccomp-bpf-hook

1.2.10-1.module+el8.10.0+90298+77a9814d

podman

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-catatonit

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-docker

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-gvproxy

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-plugins

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-remote

4.9.4-3.0.1.module+el8.10.0+90352+16362864

podman-tests

4.9.4-3.0.1.module+el8.10.0+90352+16362864

python3-criu

3.18-5.module+el8.10.0+90337+0d7b6e74

python3-podman

4.9.0-1.module+el8.10.0+90298+77a9814d

runc

1.1.12-1.module+el8.10.0+90298+77a9814d

skopeo

1.14.3-2.module+el8.10.0+90337+0d7b6e74

skopeo-tests

1.14.3-2.module+el8.10.0+90337+0d7b6e74

slirp4netns

1.2.3-1.module+el8.10.0+90298+77a9814d

udica

0.2.6-21.module+el8.10.0+90337+0d7b6e74

Связанные CVE

Связанные уязвимости

rocky
около 1 года назад

Moderate: buildah security and bug fix update

rocky
около 1 года назад

Moderate: podman security and bug fix update

oracle-oval
около 1 года назад

ELSA-2024-3827: buildah security and bug fix update (MODERATE)

oracle-oval
около 1 года назад

ELSA-2024-3826: podman security and bug fix update (MODERATE)

CVSS3: 4.9
ubuntu
больше 1 года назад

jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more. A vulnerability has been identified in the JSON Web Encryption (JWE) decryption interfaces, specifically related to the support for decompressing plaintext after its decryption. Under certain conditions it is possible to have the user's environment consume unreasonable amount of CPU time or memory during JWE Decryption operations. This issue has been patched in versions 2.0.7 and 4.15.5.

Уязвимость ELSA-2024-3968