ELSA-2023-13054

ELSA-2023-13054 - conmon security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-12-19

Description

conmon
[2.1.3-7]
- Resolve CVE-2023-39325

[2.1.3-6]
- Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile

[2.1.3-5]
- Add systemd-devel as build requirement

[2.1.3-4]
- Add support ARM build

cri-o
[1.26.3-3]
- Resolve CVE-2023-39325

[1.26.3-2]
- Add support for ARM build

cri-tools
[1.26.1-3]
- Resolve CVE-2023-39325

[1.26.1-2]
- Add ARM build support

etcd
[3.5.9-2]
- Bump up version

[3.5.9-1]
- Added Oracle specific build files

flannel-cni-plugin
[1.1.2-3]
- Resolve CVE-2023-44487 and CVE-2023-39325

[1.1.2-2]
- Add ARM build support

helm
[3.12.0-3]
- address CVE-2023-44487 and CVE-2023-39325

[-]
- Add support for ARM build

istio
[1.17.8-1]
- Added Oracle specific files for 1.17.8-1

kata
[1.12.1-14]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-13]
- Rebuild kata to fix timestamp issue

[1.12.1-12]
- Add support for ARM build

kata-agent
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Remove build_date global variable in kata-image specfile

[1.12.1-7]
- Add support for ARM build

kata-image
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Remove build_date global variable in specfile

[1.12.1-7]
- Add support for ARM build

kata-ksm-throttler
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

kata-proxy
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

kata-runtime
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

kata-shim
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

kubernetes
[1.26.10-2]
- Allow dashes DNS image

[1.26.10-1]
- Added Oracle specific build files for Kubernetes

kubernetes-cni
[1.1.2-3]
- Resolve CVE-2023-44487 and CVE-2023-39325

[1.1.2-2]
- Add support for ARM build

kubernetes-cni-plugins
[1.2.0-4]
- Fix go.mod

[1.2.0-3]
- Resolve CVE-2023-44487 and CVE-2023-39325

[1.2.0-2]
- Add support for ARM build

kubevirt
[0.58.0-4]
- Updated to address CVE-2023-44487 and CVE-2023-39325

olcne
[1.7.5-17]
- Fix update issue from 1.6.x -> 1.7.5

[1.7.5-16]
- Pass imagetag to the metallb tool that converts configmap to crs

[1.7.5-15]
- Fix metallb upgrade failure when proxy is needed

[1.7.5-14]
- Update conmon to 2.1.3-7 in scripts

[1.7.5-13]
- Update module-operator to address CVE-2023-44487, CVE-2023-39325

[1.7.5-12]
- Update multus-cni 3.9.3 to address CVE-2023-44487 and CVE-2023-39325

[1.7.5-11]
- Update multus-cni 4.0.1 to address CVE-2023-44487 and CVE-2023-39325

[1.7.5-10]
- Update metallb 0.13.9 to address CVE-2023-44487 and CVE-2023-39325

[1.7.5-9]
- Update externalip-webhook 1.0.0 to address CVE-2023-44487 and CVE-2023-39325

[1.7.5-8]
- Update calico-3.25.0 and 3.25.1 to address CVE-2023-44487, CVE-2023-39325

[1.7.5-7]
- Update rook-1.10.9 and 1.11.6 to address golang CVE-2023-44487, CVE-2023-39325

[1.7.5-6]
- update configmap-registry to 1.28.0 and update olm 0.23.1 to address CVE-2023-44487 and CVE-2023-39325

[1.7.5-5]
- Update Istio, Grafana, Prometheus, and Kubernetes-dashboard to address CVE's
- CVE-2023-44487
- CVE-2023-39325

[1.7.5-4]
- update helm 3.12.0 to Address CVE-2023-44487 and CVE-2023-39325

[1.7.5-3]
- Update kubernetes and components to address golang CVE-2023-44487, CVE-2023-39325

[1.7.5-2]
- Add olm 0.23.1 charts

[1.7.5-1]
- Update kubevirt 0.58.0 to address CVE-2023-44487 and CVE-2023-39325

yq
[4.34.1-3]
- address CVE-2023-44487 and CVE-2023-3932A

[4.34.1-2]
- Add support for ARM build

Related CVEs

CVE-2023-44487

CVE-2023-39325

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	yq-4.34.1-3.el8.src.rpm	befdffc620a1f0fa7b66d75812ea178bd6847ac238d876ce0778ecbdca8703b3	-	ol8_aarch64_olcne18
	yq-4.34.1-3.el8.aarch64.rpm	923a0bc30799078121aaa902398969332824434ab56bae88bc7eb882f4769f40	-	ol8_aarch64_olcne18
Oracle Linux 8 (x86_64)	conmon-2.1.3-7.el8.src.rpm	898d5f1f96c7c5317fc95adc95c2f926c0d6c547705d10d70a3c426abe0cee04	-	ol8_x86_64_olcne16
	conmon-2.1.3-7.el8.src.rpm	898d5f1f96c7c5317fc95adc95c2f926c0d6c547705d10d70a3c426abe0cee04	-	ol8_x86_64_olcne17
	cri-o-1.26.3-3.el8.src.rpm	ea9152423e10e71e5af1f299023fae659dcc84ec3841a0c3abbb91ee7d7ec1df	-	ol8_x86_64_olcne17
	cri-tools-1.26.1-3.el8.src.rpm	9968789206e6de250aca7634590645ea55a7c890fb849a90442cd955012a8878	-	ol8_x86_64_olcne17
	etcd-3.5.9-2.el8.src.rpm	1664f266341f73e3e925356736bfbdefd8e7b6984398eb5e253982b391b61fc7	-	ol8_x86_64_olcne16
	etcd-3.5.9-2.el8.src.rpm	1664f266341f73e3e925356736bfbdefd8e7b6984398eb5e253982b391b61fc7	-	ol8_x86_64_olcne17
	flannel-cni-plugin-1.1.2-3.el8.src.rpm	dc2d183a7f81d00b096e21e4abf0382f985b25a70fb837a1b023267c3510b3f9	-	ol8_x86_64_olcne17
	helm-3.12.0-3.el8.src.rpm	4f74c40d2c3283c0a59be36247d5cd873ea03aca3dcaa0b5b00ab3a43f06aa51	-	ol8_x86_64_olcne17
	istio-1.17.8-1.el8.src.rpm	3ce6cffb0415d9ca027768b4dc33ad29fd3d24d201a133c58e4553649f8cb679	-	ol8_x86_64_olcne17
	kata-1.12.1-14.el8.src.rpm	fe3f104f5a82b079f29f4ff8c81168f22faa94f58fb36d186d5dc733f3a61b24	-	ol8_x86_64_olcne16
	kata-1.12.1-14.el8.src.rpm	fe3f104f5a82b079f29f4ff8c81168f22faa94f58fb36d186d5dc733f3a61b24	-	ol8_x86_64_olcne17
	kata-agent-1.12.1-9.el8.src.rpm	9d6db54d3096ef6a080d3df641b459e9824de60833d376eb713c2b76bb8e7ff7	-	ol8_x86_64_olcne16
	kata-agent-1.12.1-9.el8.src.rpm	9d6db54d3096ef6a080d3df641b459e9824de60833d376eb713c2b76bb8e7ff7	-	ol8_x86_64_olcne17
	kata-image-1.12.1-9.9.ol8_202311161805.src.rpm	221cbc99a9a756ed0f52aa137b633adeb5044a47350031eb4ea25b2566ba8787	-	ol8_x86_64_olcne16
	kata-image-1.12.1-9.9.ol8_202311161805.src.rpm	221cbc99a9a756ed0f52aa137b633adeb5044a47350031eb4ea25b2566ba8787	-	ol8_x86_64_olcne17
	kata-ksm-throttler-1.12.1-9.el8.src.rpm	61229a172ae360bbfed34a5fafed160cf29b98b539a0b36b0848a63a31f1fd6a	-	ol8_x86_64_olcne16
	kata-ksm-throttler-1.12.1-9.el8.src.rpm	61229a172ae360bbfed34a5fafed160cf29b98b539a0b36b0848a63a31f1fd6a	-	ol8_x86_64_olcne17
	kata-proxy-1.12.1-9.el8.src.rpm	e5e7dc78f15508b92c8d87843d51fff7e97f13b701131a5631c28c85b2f66caa	-	ol8_x86_64_olcne16
	kata-proxy-1.12.1-9.el8.src.rpm	e5e7dc78f15508b92c8d87843d51fff7e97f13b701131a5631c28c85b2f66caa	-	ol8_x86_64_olcne17
	kata-runtime-1.12.1-9.el8.src.rpm	df3e1278e7e89ccbc1def4feaecf9b8471d0e92d7debd533e20f2f14911049d9	-	ol8_x86_64_olcne16
	kata-runtime-1.12.1-9.el8.src.rpm	df3e1278e7e89ccbc1def4feaecf9b8471d0e92d7debd533e20f2f14911049d9	-	ol8_x86_64_olcne17
	kata-shim-1.12.1-9.el8.src.rpm	c19271e0e604f8cd544fb9a6a37f85b096f0ad7f7a02a5e0a10f4e97e20e404e	-	ol8_x86_64_olcne16
	kata-shim-1.12.1-9.el8.src.rpm	c19271e0e604f8cd544fb9a6a37f85b096f0ad7f7a02a5e0a10f4e97e20e404e	-	ol8_x86_64_olcne17
	kubernetes-1.26.10-2.el8.src.rpm	a0d5712ec8d6f8688eeeb7f0eb1255c0c075cd2038c76a2962906b0ce27794d2	-	ol8_x86_64_olcne17
	kubernetes-cni-1.1.2-3.el8.src.rpm	af56d12ad4338242dcd978e706fac31e8a5530706b34e7d1820527c219840b99	-	ol8_x86_64_olcne17
	kubernetes-cni-plugins-1.2.0-4.el8.src.rpm	8dd2879c1dedbb51257acebaeec2d66598720b253b5900bd68b58e5dfab13908	-	ol8_x86_64_olcne17
	kubevirt-0.58.0-4.el8.src.rpm	38bfd39ec921c5d4dd1b737aac145fa2f8e718e61740cd3203ce3b43f2672aac	-	ol8_x86_64_olcne17
	olcne-1.7.5-17.el8.src.rpm	0476596f772d17a891fa7202b060e72aa0d540ad22b1c889a0037bc26634445d	-	ol8_x86_64_olcne17
	yq-4.34.1-3.el8.src.rpm	3c691211969a2736b15496ad1f605c2cbe531e51989e74a2391aeac7a79771f6	-	ol8_x86_64_olcne16
	yq-4.34.1-3.el8.src.rpm	3c691211969a2736b15496ad1f605c2cbe531e51989e74a2391aeac7a79771f6	-	ol8_x86_64_olcne17
	yq-4.34.1-3.el8.src.rpm	befdffc620a1f0fa7b66d75812ea178bd6847ac238d876ce0778ecbdca8703b3	-	ol8_x86_64_olcne18
	conmon-2.1.3-7.el8.x86_64.rpm	f0c8689881a87d6272a9dab9dc163ab216e97ce815b333f46b091a65011f4174	-	ol8_x86_64_olcne16
	conmon-2.1.3-7.el8.x86_64.rpm	f0c8689881a87d6272a9dab9dc163ab216e97ce815b333f46b091a65011f4174	-	ol8_x86_64_olcne17
	cri-o-1.26.3-3.el8.x86_64.rpm	fefd58c03a1d623cf63a73138d6e20a6755e9f91a187a4609062b30485a605f7	-	ol8_x86_64_olcne17
	cri-tools-1.26.1-3.el8.x86_64.rpm	82ade0b69df4f3ad2ba4b80b089ffbfa0e911d54cdc753cee4d15a03a1710419	-	ol8_x86_64_olcne17
	etcd-3.5.9-2.el8.x86_64.rpm	150c8302f38ca4eff5c62f0593d210c61708e081664af0388ff210254cbec8f9	-	ol8_x86_64_olcne16
	etcd-3.5.9-2.el8.x86_64.rpm	150c8302f38ca4eff5c62f0593d210c61708e081664af0388ff210254cbec8f9	-	ol8_x86_64_olcne17
	flannel-cni-plugin-1.1.2-3.el8.x86_64.rpm	e518e99d0170ed530515032ed35bb4c02e5ff8b6145a6f28191cff657e1d3022	-	ol8_x86_64_olcne17
	helm-3.12.0-3.el8.x86_64.rpm	0157bcc50add73f3b5a9b397009427edd3d84e1ab667fa5f0ee54dc5b6731c95	-	ol8_x86_64_olcne17
	istio-1.17.8-1.el8.x86_64.rpm	6a39bdf46e00b3e839785459b368ab50b7a6a2bf28ac7182b041a9e6b8811c69	-	ol8_x86_64_olcne17
	istio-istioctl-1.17.8-1.el8.x86_64.rpm	8a2bd70e32731f06058c373e538c801755451db678cb9d75fddadb5441e00c74	-	ol8_x86_64_olcne17
	kata-1.12.1-14.el8.x86_64.rpm	9323820c36b7630081da031525d1647343b557517a0892d899458d63bef7db9c	-	ol8_x86_64_olcne16
	kata-1.12.1-14.el8.x86_64.rpm	9323820c36b7630081da031525d1647343b557517a0892d899458d63bef7db9c	-	ol8_x86_64_olcne17
	kata-agent-1.12.1-9.el8.x86_64.rpm	ca5afdeb37983b4284033fd4e26e9bb34730e62216768b145b7ede66ce3ddf6c	-	ol8_x86_64_olcne16
	kata-agent-1.12.1-9.el8.x86_64.rpm	ca5afdeb37983b4284033fd4e26e9bb34730e62216768b145b7ede66ce3ddf6c	-	ol8_x86_64_olcne17
	kata-image-1.12.1-9.9.ol8_202311161805.x86_64.rpm	ad8a6833965149ff3fc1547717ee3eaf0db1096bcd71fda6afe59a238aabbcd4	-	ol8_x86_64_olcne16
	kata-image-1.12.1-9.9.ol8_202311161805.x86_64.rpm	ad8a6833965149ff3fc1547717ee3eaf0db1096bcd71fda6afe59a238aabbcd4	-	ol8_x86_64_olcne17
	kata-ksm-throttler-1.12.1-9.el8.x86_64.rpm	b675a937b9f9f04858d460cb788e7e2d372cb827de3d7b233de0211ce87d204a	-	ol8_x86_64_olcne16
	kata-ksm-throttler-1.12.1-9.el8.x86_64.rpm	b675a937b9f9f04858d460cb788e7e2d372cb827de3d7b233de0211ce87d204a	-	ol8_x86_64_olcne17
	kata-proxy-1.12.1-9.el8.x86_64.rpm	a8d681012fe5c7a6aeab9092117916ed14928427e516266e061f10da105b043b	-	ol8_x86_64_olcne16
	kata-proxy-1.12.1-9.el8.x86_64.rpm	a8d681012fe5c7a6aeab9092117916ed14928427e516266e061f10da105b043b	-	ol8_x86_64_olcne17
	kata-runtime-1.12.1-9.el8.x86_64.rpm	46bd3d8bba50a5520d617b6233bc022ec757b1beb471f7744947e086c4db3832	-	ol8_x86_64_olcne16
	kata-runtime-1.12.1-9.el8.x86_64.rpm	46bd3d8bba50a5520d617b6233bc022ec757b1beb471f7744947e086c4db3832	-	ol8_x86_64_olcne17
	kata-shim-1.12.1-9.el8.x86_64.rpm	f58f2e6ba19d7fe811f4fcaf5da9c70f0d877c09900613615f9a016e85e168e4	-	ol8_x86_64_olcne16
	kata-shim-1.12.1-9.el8.x86_64.rpm	f58f2e6ba19d7fe811f4fcaf5da9c70f0d877c09900613615f9a016e85e168e4	-	ol8_x86_64_olcne17
	kubeadm-1.26.10-2.el8.x86_64.rpm	17b899b5823d869eb15bf4a49ee42e4212b811261e7491879c9a7bcdc351d217	-	ol8_x86_64_olcne17
	kubectl-1.26.10-2.el8.x86_64.rpm	93812ac338e1b165c87ff0fd5cd20a32004ed493d0a25d42fc3275f561499d51	-	ol8_x86_64_olcne17
	kubelet-1.26.10-2.el8.x86_64.rpm	5c4779795b80276274d53ea4ef2d1d8965225ca06ae66d7cd00fc6338a3f15d4	-	ol8_x86_64_olcne17
	kubernetes-cni-1.1.2-3.el8.x86_64.rpm	da22ee277c37ae0317913bcfb3ebb9346c1a8c2a92d7b083f374c3b54043aa66	-	ol8_x86_64_olcne17
	kubernetes-cni-plugins-1.2.0-4.el8.x86_64.rpm	511372b892eb787cbab51e75d367c13c738d9e61c8de2490262af5648d070922	-	ol8_x86_64_olcne17
	olcne-agent-1.7.5-17.el8.x86_64.rpm	17d47bc7ff3d1a7be6f41b109f6b842b1c0be6dc5f142afc67f16cdc5e41842a	-	ol8_x86_64_olcne17
	olcne-api-server-1.7.5-17.el8.x86_64.rpm	183a1b6d9a6020359301549c051428f6527f251044617b2fd8ce9343c1a75083	-	ol8_x86_64_olcne17
	olcne-calico-chart-1.7.5-17.el8.x86_64.rpm	75b6712831a1039feae1a5acf5554b4f58ceb3dd0b8fb7c8055fc428dddb8928	-	ol8_x86_64_olcne17
	olcne-gluster-chart-1.7.5-17.el8.x86_64.rpm	7798c816727940e74bc32ec0ce59963ef4ccfe8fab22c33541d75b3b322cea9d	-	ol8_x86_64_olcne17
	olcne-grafana-chart-1.7.5-17.el8.x86_64.rpm	05064ab5c4ba11bfdc90bfb622d1ddd0f2164005c8fd738ab190a1cb9556b21b	-	ol8_x86_64_olcne17
	olcne-istio-chart-1.7.5-17.el8.x86_64.rpm	5ee798fec00f878ccd3625690bbf905cbe91be944d39791b7820dc7b584ba707	-	ol8_x86_64_olcne17
	olcne-kubevirt-chart-1.7.5-17.el8.x86_64.rpm	1aa82b460a40cdaeba6d11f7a8e3eca8f7bd457315ca59258a81fa97f6e94e83	-	ol8_x86_64_olcne17
	olcne-metallb-chart-1.7.5-17.el8.x86_64.rpm	ec8de981b8bce5a65d2702a3705cf0cc1c513f8c229db76c19400220957af52c	-	ol8_x86_64_olcne17
	olcne-multus-chart-1.7.5-17.el8.x86_64.rpm	cd9e7609ec86f34a83c894e45145bb34d5929d7dfc3c1dde74664a1b67cbc727	-	ol8_x86_64_olcne17
	olcne-nginx-1.7.5-17.el8.x86_64.rpm	70586ccc2ef828d61541796528c04acb40f07c03f3a1f7416196e52c095ff812	-	ol8_x86_64_olcne17
	olcne-oci-ccm-chart-1.7.5-17.el8.x86_64.rpm	efec5deb571d021d10a107e656da758c486a58bc71fd398878c17f5e0f232933	-	ol8_x86_64_olcne17
	olcne-olm-chart-1.7.5-17.el8.x86_64.rpm	daba616c619285aa1bb3469b462e785b98ebe1c666c7871a4f98c16eda2aa7bb	-	ol8_x86_64_olcne17
	olcne-prometheus-chart-1.7.5-17.el8.x86_64.rpm	6594d5eaccabcb456c36a68ba0ddaa35fb184d529b65f75b6710d338747762b4	-	ol8_x86_64_olcne17
	olcne-rook-chart-1.7.5-17.el8.x86_64.rpm	cb678c84095e1ec2dd9bea57dfee13b04e577c6eda2f35504b2a4cd8ce69a035	-	ol8_x86_64_olcne17
	olcne-utils-1.7.5-17.el8.x86_64.rpm	4b885a4cc14648d388bd32ae098ffb5069a5f52e19606615ee9b13f2f54299f4	-	ol8_x86_64_olcne17
	olcnectl-1.7.5-17.el8.x86_64.rpm	3b142809aead41b5c342caf1526e5664413416b137203186fae692870629e930	-	ol8_x86_64_olcne17
	virtctl-0.58.0-4.el8.x86_64.rpm	dcc4c7260e1c0c613109d84eaab4cbbf833cca2006ffe5649ee946ac578aa8b4	-	ol8_x86_64_olcne17
	yq-4.34.1-3.el8.x86_64.rpm	a14e9c0540fdc29ab9d21e8ee87dcd70f5ed48a8b1a380f79740d4e057cbf4e3	-	ol8_x86_64_olcne16
	yq-4.34.1-3.el8.x86_64.rpm	a14e9c0540fdc29ab9d21e8ee87dcd70f5ed48a8b1a380f79740d4e057cbf4e3	-	ol8_x86_64_olcne17
	yq-4.34.1-3.el8.x86_64.rpm	a14e9c0540fdc29ab9d21e8ee87dcd70f5ed48a8b1a380f79740d4e057cbf4e3	-	ol8_x86_64_olcne18

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team