Oracle Linux 8：glibc (ELSA-2025-12980)

medium Nessus 插件 ID 244055

语言：

简介

远程 Oracle Linux 主机缺少安全更新。

描述

远程 Oracle Linux 8 主机上安装的多个程序包受到 ELSA-2025-12980 公告中提及的一个漏洞影响。

[2.28-251.0.3.25]
- Oracle 修补程序的转发端口审阅者： Jose E. Marchesi <[email protected]> Oracle 历史记录
2025 年 6 月 9 日Cupertino Miranda <[email protected]> - 2.28-251.0.3.22
- Oracle 修补程序的转发端口审阅者：David Faust <[email protected]> 2025 年 4 月 14 日 Cupertino Miranda <[email protected]> - 2.28-251.0.3.16
- Oracle 修补程序的转发端口审阅者：Elena Zannoni <[email protected]> 2025 年 3 月 26 日 Cupertino Miranda <[email protected]> - 2.28-251.0.3.14
- OraBug：36625686 为字符串函数添加 MTE 支持审核人： Jose E. Marchesi <[email protected]> 2025 年 3 月 17 日 Cupertino Miranda <[email protected]> - 2.28-251.0.2.14
- 向前移植 Oracle 补丁审核人：David Faust <[email protected]> 2025 年 2 月 19 日 Cupertino Miranda <[email protected]> - 2.28-251.0.2.13
- 向前移植 Oracle 补丁审核人：Jose E. Marchesi <[email protected]> 2025 年 1 月 28 日 Cupertino Miranda <[email protected]> - 2.28-251.0.2.11
- 向前移植 Oracle 补丁审核人：Jose E. Marchesi <[email protected]> 2024 年 9 月 24 日 Cupertino Miranda <[email protected]> - 2.28-251.0.2.5
- 将 Oracle 补丁向前移植到 2.28-251.5 以上版本审核人：Jose E. Marchesi <[email protected]> 2024 年 8 月 26 日 Jose E. Marchesi <[email protected]> - 2.28-251.0.2.4
- 将 Oracle 补丁向前移植到 2.28-251.4 以上版本审核人：David Faust <[email protected]> 2024 年 5 月 24 日 Cupertino Miranda <[email protected]> - 2.28-251.0.2.2
- 将 Oracle 补丁向前移植到 2.28-251.2 以上版本审核人：Jose E. Marchesi <[email protected]> 2024 年 5 月 23 日 Cupertino Miranda <[email protected]> - 2.28-251.0.2.1
- 将 Oracle 补丁向前移植到 2.28-251.1 以上版本审核人：Jose E. Marchesi <[email protected]> 2024 年 5 月 22 日 Cupertino Miranda <[email protected]> - 2.28-251.0.2
- 将 Oracle 补丁向前移植到 ol8-u10 版本审核人：Jose E. Marchesi <[email protected]> 2024 年 3 月 28 日 Cupertino Miranda <[email protected]> - 2.28-251.0.1
- 将 Oracle 补丁向前移植到 ol8-u10-beta 版本审核人：Jose E. Marchesi <[email protected]> 2024 年 3 月 5 日 Cupertino Miranda <[email protected]> - 2.28-236.0.1.12
- 转发 Oracle 修补程序的端口。
审核人：Jose E. Marchesi <[email protected]> 2023 年 11 月 14 日 Cupertino Miranda <[email protected]> - 2.28-236.0.1.7
- 转发 Oracle 修补程序的端口。
审核人：Jose E. Marchesi <[email protected]> 2023 年 10 月 4 日 Cupertino Miranda <[email protected]> - 2.28-236.0.1.6
- 转发 Oracle 修补程序的端口。
审核人：Jose E. Marchesi <[email protected]> 2023 年 4 月 21 日 Cupertino Miranda <[email protected]> - 2.28-225.0.3
- OraBug 35317410 为 pthread_create 堆栈添加 Glibc 可调参数以禁用大型页面内存
- 创建了可调参数 glibc.pthread.stack_hugetlb，以控制堆栈分配何时可使用大页内存。
- 如果启用了 THP 并且 glibc.pthread.stack_hugetlb 设置为 0，glibc 将通过 madvise 系统调用建议内核不要为堆栈分配使用大页内存。
审核人：Jose E. Marchesi <[email protected]> 2023 年 4 月 11 日 Cupertino Miranda <[email protected]> - 2.28-225.0.2
- OraBug：35268809 修复了 tcache_key_initialize 的 VDSO 初始化审核人：Jose E. Marchesi <[email protected]> 2023 年 3 月 28 日 Cupertino Miranda <[email protected]> - 2.28-225.0.1
- 合并 ol8u8 beta 的 Oracle 补丁，审核人：Jose E. Marchesi <[email protected]> 2022 年 9 月 28 日 Patrick McGehearty <[email protected]> - 2.28-211.0.1
- 合并 ol8u7 beta 的 Oracle 补丁，审核人：Jose E. Marchesi <[email protected]> 2022 年 8 月 8 日 Patrick McGehearty <[email protected]> - 2.28-189.5.0.2
- 在 x86_64、aarch64、i386、arm 和 mips 静态链接程序上启用 VDSO。
- 这些更改无需内核 syscall 即可读取实时时钟。
OraBug：30478315 审核人：Jose E. Marchesi <[email protected]> 2022 年 5 月 2 日 Patrick McGehearty <[email protected]> - 2.28-199.0.1
- 将来自 c8s 199 的补丁与 ol8u6 beta 合并审核人：Jose E. Marchesi <[email protected]>
- 更新 Linux 内核的 siginfo 常量 (OraBug: 33734528)
- 删除对可调参数 MALLOC_MMAP_THRESHOLD 的限制 (Orabug: 29630826)
- 为 pthread 的自适应机制提供 glibc.pthread.mutex_spin_count 可调参数
- 自旋互斥锁问题 (Orabug: 27982358) 审核人：Qing Zhao <[email protected]>
- 将 Ampere emag 添加到可调 cpu 列表 (Patrick McGehearty)
- 为 emag 添加优化的 memset
- 为 falkor 添加 strlen 的 ASIMD 变体 Orabug: 2700101。
- 修改 glibc-ora28849085.patch，使其可用于 RHCK 内核。(Orabug: 28849085)
- 使 _IO_funlockfile 匹配 __funlockfile 并使 _IO_flockfile 匹配 __flockfile 两者都应测试 if (stream->_flags & _IO_USER_LOCK) == 0)
_IO_lock_lock (*stream->_lock);
OraBug: 28481550。
审核人：Qing Zhao <[email protected]>

[2.28-251.25]
- CVE-2025-8058regcomp 中的双重释放 (RHEL-105326)

Tenable 已直接从 Oracle Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

解决方案

更新受影响的程序包。

另见

https://linux.oracle.com/errata/ELSA-2025-12980.html

插件详情

严重性: Medium

ID: 244055

文件名: oraclelinux_ELSA-2025-12980.nasl

版本: 1.1

类型: local

代理: unix

系列: Oracle Linux Local Security Checks

发布时间: 2025/8/6

最近更新时间: 2025/8/6

支持的传感器: Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus

风险信息

VPR

风险因素: Medium

分数: 4.9

CVSS v2

风险因素: Low

基本分数: 3.5

时间分数: 2.6

矢量: CVSS2#AV:L/AC:H/Au:S/C:P/I:P/A:P

CVSS 分数来源: CVE-2025-8058

CVSS v3

风险因素: Medium

基本分数: 4.2

时间分数: 3.7

矢量: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

时间矢量: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

风险因素: Medium

Base Score: 5.9

Threat Score: 1.7

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H

漏洞信息

CPE: p-cpe:/a:oracle:linux:glibc-langpack-tt, p-cpe:/a:oracle:linux:glibc-langpack-lb, p-cpe:/a:oracle:linux:glibc-langpack-as, p-cpe:/a:oracle:linux:glibc-langpack-mfe, p-cpe:/a:oracle:linux:glibc-langpack-nds, p-cpe:/a:oracle:linux:glibc-langpack-pap, p-cpe:/a:oracle:linux:glibc-langpack-ast, p-cpe:/a:oracle:linux:glibc-langpack-sd, p-cpe:/a:oracle:linux:glibc-langpack-hsb, p-cpe:/a:oracle:linux:glibc-langpack-the, p-cpe:/a:oracle:linux:glibc-langpack-rw, p-cpe:/a:oracle:linux:glibc-langpack-tr, p-cpe:/a:oracle:linux:glibc-langpack-hne, p-cpe:/a:oracle:linux:glibc-langpack-ml, p-cpe:/a:oracle:linux:glibc-langpack-fy, p-cpe:/a:oracle:linux:glibc-langpack-ln, p-cpe:/a:oracle:linux:glibc-langpack-cmn, p-cpe:/a:oracle:linux:glibc-langpack-tig, p-cpe:/a:oracle:linux:glibc-langpack-gez, p-cpe:/a:oracle:linux:glibc-langpack-te, p-cpe:/a:oracle:linux:glibc-langpack-fi, p-cpe:/a:oracle:linux:glibc-langpack-or, p-cpe:/a:oracle:linux:glibc-langpack-vi, p-cpe:/a:oracle:linux:glibc-langpack-uk, p-cpe:/a:oracle:linux:glibc-langpack-ha, p-cpe:/a:oracle:linux:glibc-langpack-ber, p-cpe:/a:oracle:linux:glibc-langpack-shs, p-cpe:/a:oracle:linux:glibc-langpack-niu, p-cpe:/a:oracle:linux:glibc-langpack-nl, p-cpe:/a:oracle:linux:glibc-langpack-bo, p-cpe:/a:oracle:linux:glibc-langpack-mhr, p-cpe:/a:oracle:linux:glibc-langpack-hy, p-cpe:/a:oracle:linux:glibc-nss-devel, p-cpe:/a:oracle:linux:glibc-langpack-wa, p-cpe:/a:oracle:linux:glibc-langpack-ka, p-cpe:/a:oracle:linux:glibc-langpack-ts, p-cpe:/a:oracle:linux:glibc-langpack-mt, p-cpe:/a:oracle:linux:glibc-langpack-pt, p-cpe:/a:oracle:linux:glibc-langpack-wal, p-cpe:/a:oracle:linux:glibc-langpack-mr, p-cpe:/a:oracle:linux:glibc-langpack-ss, p-cpe:/a:oracle:linux:glibc-langpack-ig, p-cpe:/a:oracle:linux:glibc-langpack-mg, p-cpe:/a:oracle:linux:glibc-langpack-cv, p-cpe:/a:oracle:linux:glibc-langpack-ff, p-cpe:/a:oracle:linux:glibc-langpack-sk, p-cpe:/a:oracle:linux:nss_db, p-cpe:/a:oracle:linux:glibc-langpack-az, p-cpe:/a:oracle:linux:glibc-langpack-ia, p-cpe:/a:oracle:linux:glibc-langpack-wae, p-cpe:/a:oracle:linux:glibc-langpack-am, p-cpe:/a:oracle:linux:glibc-langpack-gl, p-cpe:/a:oracle:linux:glibc-gconv-extra, p-cpe:/a:oracle:linux:glibc-langpack-miq, p-cpe:/a:oracle:linux:glibc-langpack-tn, p-cpe:/a:oracle:linux:glibc-langpack-doi, p-cpe:/a:oracle:linux:glibc-langpack-zu, p-cpe:/a:oracle:linux:glibc-doc, p-cpe:/a:oracle:linux:glibc-langpack-mni, p-cpe:/a:oracle:linux:glibc-langpack-mi, p-cpe:/a:oracle:linux:glibc-langpack-pl, p-cpe:/a:oracle:linux:glibc-langpack-an, p-cpe:/a:oracle:linux:glibc-langpack-nr, p-cpe:/a:oracle:linux:glibc-langpack-os, p-cpe:/a:oracle:linux:glibc-langpack-ja, p-cpe:/a:oracle:linux:glibc-langpack-sid, p-cpe:/a:oracle:linux:glibc-langpack-sm, p-cpe:/a:oracle:linux:glibc-langpack-szl, p-cpe:/a:oracle:linux:glibc-langpack-cs, p-cpe:/a:oracle:linux:glibc-langpack-mai, p-cpe:/a:oracle:linux:glibc-langpack-sl, p-cpe:/a:oracle:linux:glibc-langpack-ht, p-cpe:/a:oracle:linux:glibc-langpack-ti, p-cpe:/a:oracle:linux:glibc-langpack-ms, p-cpe:/a:oracle:linux:glibc-langpack-gu, p-cpe:/a:oracle:linux:glibc-langpack-pa, p-cpe:/a:oracle:linux:glibc-langpack-ca, p-cpe:/a:oracle:linux:glibc-langpack-sc, p-cpe:/a:oracle:linux:glibc-langpack-is, p-cpe:/a:oracle:linux:glibc-langpack-fa, p-cpe:/a:oracle:linux:glibc-langpack-to, p-cpe:/a:oracle:linux:glibc-langpack-tcy, p-cpe:/a:oracle:linux:glibc-langpack-eu, p-cpe:/a:oracle:linux:glibc-langpack-lg, p-cpe:/a:oracle:linux:glibc-static, p-cpe:/a:oracle:linux:glibc-langpack-sq, p-cpe:/a:oracle:linux:glibc-langpack-uz, p-cpe:/a:oracle:linux:glibc-langpack-chr, p-cpe:/a:oracle:linux:glibc-langpack-sr, p-cpe:/a:oracle:linux:glibc-langpack-bi, p-cpe:/a:oracle:linux:glibc-langpack-mn, p-cpe:/a:oracle:linux:glibc-langpack-si, p-cpe:/a:oracle:linux:glibc-langpack-eo, p-cpe:/a:oracle:linux:glibc-langpack-nn, p-cpe:/a:oracle:linux:glibc-langpack-et, p-cpe:/a:oracle:linux:glibc-langpack-ve, p-cpe:/a:oracle:linux:glibc-langpack-sw, p-cpe:/a:oracle:linux:glibc-langpack-hif, p-cpe:/a:oracle:linux:glibc-langpack-sa, p-cpe:/a:oracle:linux:glibc-langpack-ku, p-cpe:/a:oracle:linux:glibc-langpack-ur, p-cpe:/a:oracle:linux:glibc-langpack-kab, p-cpe:/a:oracle:linux:glibc-langpack-yi, p-cpe:/a:oracle:linux:glibc-langpack-mk, p-cpe:/a:oracle:linux:glibc-langpack-sat, p-cpe:/a:oracle:linux:glibc-langpack-kw, p-cpe:/a:oracle:linux:glibc-langpack-ne, p-cpe:/a:oracle:linux:glibc-langpack-ro, p-cpe:/a:oracle:linux:glibc-langpack-lt, p-cpe:/a:oracle:linux:glibc-all-langpacks, p-cpe:/a:oracle:linux:glibc-langpack-csb, p-cpe:/a:oracle:linux:glibc-langpack-en, p-cpe:/a:oracle:linux:glibc-langpack-lzh, p-cpe:/a:oracle:linux:glibc-langpack-om, p-cpe:/a:oracle:linux:glibc-langpack-lo, p-cpe:/a:oracle:linux:glibc-langpack-shn, p-cpe:/a:oracle:linux:glibc-langpack-sv, p-cpe:/a:oracle:linux:glibc-langpack-ak, p-cpe:/a:oracle:linux:glibc-langpack-lv, p-cpe:/a:oracle:linux:glibc-langpack-so, p-cpe:/a:oracle:linux:glibc-langpack-it, p-cpe:/a:oracle:linux:glibc-langpack-ru, p-cpe:/a:oracle:linux:glibc-langpack-hu, p-cpe:/a:oracle:linux:glibc-langpack-kn, p-cpe:/a:oracle:linux:glibc-langpack-br, p-cpe:/a:oracle:linux:glibc-utils, p-cpe:/a:oracle:linux:glibc-langpack-da, p-cpe:/a:oracle:linux:glibc-langpack-dz, p-cpe:/a:oracle:linux:glibc-langpack-oc, p-cpe:/a:oracle:linux:glibc-langpack-ar, p-cpe:/a:oracle:linux:glibc-langpack-kl, p-cpe:/a:oracle:linux:glibc-langpack-mjw, p-cpe:/a:oracle:linux:glibc-langpack-ce, p-cpe:/a:oracle:linux:glibc-langpack-de, p-cpe:/a:oracle:linux:glibc-langpack-id, cpe:/o:oracle:linux:8, p-cpe:/a:oracle:linux:glibc-langpack-gd, p-cpe:/a:oracle:linux:glibc-langpack-sgs, p-cpe:/a:oracle:linux:glibc-langpack-my, p-cpe:/a:oracle:linux:glibc-langpack-es, p-cpe:/a:oracle:linux:glibc-langpack-ks, p-cpe:/a:oracle:linux:glibc-minimal-langpack, p-cpe:/a:oracle:linux:glibc-benchtests, p-cpe:/a:oracle:linux:glibc-langpack-bn, p-cpe:/a:oracle:linux:glibc-langpack-hr, p-cpe:/a:oracle:linux:glibc-langpack-km, p-cpe:/a:oracle:linux:glibc-langpack-yue, p-cpe:/a:oracle:linux:glibc-langpack-ug, p-cpe:/a:oracle:linux:glibc-langpack-ga, p-cpe:/a:oracle:linux:glibc-langpack-xh, p-cpe:/a:oracle:linux:glibc-langpack-nan, p-cpe:/a:oracle:linux:glibc-langpack-ayc, p-cpe:/a:oracle:linux:glibc-langpack-anp, p-cpe:/a:oracle:linux:glibc-langpack-wo, p-cpe:/a:oracle:linux:glibc-langpack-tl, p-cpe:/a:oracle:linux:glibc-langpack-zh, p-cpe:/a:oracle:linux:glibc-langpack-st, p-cpe:/a:oracle:linux:nscd, p-cpe:/a:oracle:linux:glibc-langpack-bs, p-cpe:/a:oracle:linux:glibc-langpack-nso, p-cpe:/a:oracle:linux:glibc-langpack-li, p-cpe:/a:oracle:linux:glibc-langpack-quz, p-cpe:/a:oracle:linux:glibc-langpack-iu, p-cpe:/a:oracle:linux:glibc-langpack-gv, p-cpe:/a:oracle:linux:glibc-langpack-be, p-cpe:/a:oracle:linux:glibc-langpack-sah, p-cpe:/a:oracle:linux:glibc-langpack-fr, p-cpe:/a:oracle:linux:compat-libpthread-nonshared, p-cpe:/a:oracle:linux:glibc-langpack-he, p-cpe:/a:oracle:linux:glibc-langpack-ik, p-cpe:/a:oracle:linux:glibc-langpack-aa, p-cpe:/a:oracle:linux:glibc-langpack-yo, cpe:/o:oracle:linux:8:10:baseos_patch, p-cpe:/a:oracle:linux:glibc-langpack-unm, p-cpe:/a:oracle:linux:glibc-langpack-mag, p-cpe:/a:oracle:linux:glibc, p-cpe:/a:oracle:linux:glibc-langpack-dv, p-cpe:/a:oracle:linux:nss_hesiod, p-cpe:/a:oracle:linux:glibc-locale-source, p-cpe:/a:oracle:linux:glibc-langpack-bem, p-cpe:/a:oracle:linux:glibc-langpack-brx, p-cpe:/a:oracle:linux:glibc-langpack-lij, p-cpe:/a:oracle:linux:glibc-langpack-bhb, p-cpe:/a:oracle:linux:glibc-langpack-se, p-cpe:/a:oracle:linux:glibc-langpack-ta, p-cpe:/a:oracle:linux:glibc-langpack-hak, p-cpe:/a:oracle:linux:glibc-langpack-ky, p-cpe:/a:oracle:linux:glibc-langpack-byn, p-cpe:/a:oracle:linux:glibc-langpack-fil, p-cpe:/a:oracle:linux:libnsl, p-cpe:/a:oracle:linux:glibc-langpack-agr, p-cpe:/a:oracle:linux:glibc-langpack-crh, p-cpe:/a:oracle:linux:glibc-langpack-th, p-cpe:/a:oracle:linux:glibc-langpack-tg, p-cpe:/a:oracle:linux:glibc-langpack-fur, p-cpe:/a:oracle:linux:glibc-langpack-kok, p-cpe:/a:oracle:linux:glibc-langpack-bg, p-cpe:/a:oracle:linux:glibc-common, p-cpe:/a:oracle:linux:glibc-langpack-dsb, p-cpe:/a:oracle:linux:glibc-langpack-fo, p-cpe:/a:oracle:linux:glibc-langpack-tk, p-cpe:/a:oracle:linux:glibc-langpack-tpi, p-cpe:/a:oracle:linux:glibc-langpack-nb, p-cpe:/a:oracle:linux:glibc-headers, p-cpe:/a:oracle:linux:glibc-langpack-bho, p-cpe:/a:oracle:linux:glibc-langpack-raj, p-cpe:/a:oracle:linux:glibc-langpack-nhn, p-cpe:/a:oracle:linux:glibc-langpack-cy, p-cpe:/a:oracle:linux:glibc-langpack-el, p-cpe:/a:oracle:linux:glibc-langpack-yuw, p-cpe:/a:oracle:linux:glibc-langpack-kk, p-cpe:/a:oracle:linux:glibc-langpack-ko, p-cpe:/a:oracle:linux:glibc-langpack-af, p-cpe:/a:oracle:linux:glibc-langpack-ps, p-cpe:/a:oracle:linux:glibc-langpack-hi, p-cpe:/a:oracle:linux:glibc-devel

必需的 KB 项: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux

易利用性: No known exploits are available

补丁发布日期: 2025/8/5

漏洞发布日期: 2025/7/23

参考资料信息

CVE: CVE-2025-8058

IAVA: 2025-A-0549