Skip to content
OpenAdvisories
High ELSA-2024-12189 1 CVE

Important: conmon security update (Oracle Linux 7)

Published Mar 1, 2024 · Updated Mar 1, 2024

Summary

conmon
[2.1.3-8]
- address CVE-2023-39326

[2.1.3-7]
- Resolve CVE-2023-39325

[2.1.3-6]
- Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile

[2.1.3-5]
- Add systemd-devel as build requirement

[2.1.3-4]
- Add support ARM build

[2.1.3.3]
- Add OL9 support

[2.1.3.2]
- Update inline with Linux team building conmon for all but OL7.

[2.1.3-1]
- Added build scripts

cri-o
[1.25.5-1]
- Added Oracle Specifile Files for cri-o

cri-tools
[1.25.0-3]
- Resolve CVE-2023-39326

[1.25.0-2]
- Resolve CVE-2023-39325

[1.25.0-1]
- Added Oracle Specific Build Files for cri-tools

flannel-cni-plugin
[1.0.1-4]
- Resolve CVE-2023-39326

[1.0.1-3]
- Resolve CVE-2023-44487 and CVE-2023-39325

[1.0.1-2]
- Add support for Oracle Linux 9

[1.0.1-1]
- Added Oracle specific build files for Flannel CNI Plugins

helm
[3.11.1-3]
- address CVE-2023-39326

[3.11.1-2]
- address CVE-2023-44487 and CVE-2023-39325

[3.11.1-1]
- Added Oracle Specific build Files

istio
[1.16.7-3]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

[1.16.7-1]
- Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944.

kata
[1.12.1-17]
- Include OL9 for kernel-uek-container (currently in UEKR7_developer_preview)

[1.12.1-16]
- Rebuild with golang 1.20.12

[1.12.1-15]
- Updated for kubernetes 1.27 and 1.28

[1.12.1-14]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-13]
- Rebuild kata to fix timestamp issue

[1.12.1-12]
- Add support for ARM build

[1.12.1-11]
- Add OL9 support

[1.12.1-10]
- Updated kata-runtime version to work with more versions of kvm_utils

[1.21.1-9]
- updated cri-o and cri-tools versions to support olcne-1.6.0

[1.12.1-7]
- Updated kernel_uek_max and kernel_uek_container_max to 5.16 to support UEKR7 host and guest kernel.
Note: installed kernel < 5.16.

[1.12.1-6]
- updated cri-o and cri-tools versions to support olcne-1.5.0

[1.12.1-5]
- updated cri-o and cri-tools versions to support kubernetes-1.23

[1.12.1-4]
- update kata-image versions
- update kernel-uek-container version to kernel-uek-container-5.4.17-2136.306.1.3

[1.21.1-3]
- Support k8s 1.21.6
- updated kernel-uek-container version
- updated kata-image versions
- added buildhost variable

[1.12.1-2]
- Golang 1.15.9

[1.12.1-1]
- Updated to kata 1.12.1
- Updated guest kernel (kernel-uek-container) minimum version to UEK6U2 (5.4.17-2102.200.7)

kata-agent
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Remove build_date global variable in kata-image specfile

[1.12.1-7]
- Add support for ARM build

[1.12.1-6]
- Add OL9 support

[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper

[1.12.1-3]
- updated golang version
- added buildhost variable

[1.12.1-2]
- Golang 1.15.9

[1.12.1-1]
- Added Oracle Specific Build Files for kata-agent

kata-image
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Remove build_date global variable in specfile

[1.12.1-7]
- Add support for ARM build

[1.12.1-6]
- Restore OL7 and bump release

[1.12.1-5]
- Add support for Oracle Linux 9

[1.12.1-4]
- build for kata-agent-1.12.1-4

[1.12.1-3]
- updated golang version
- added buildhost variable

[1.12.1-2]
- Golang 1.15.9

[1.12.1-1]
- Added Oracle Specific Build Files for kata-image

kata-ksm-throttler
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

[1.12.1-6]
- Bump releaase inline with others for reversion of removal of OL7.

[1.12.1-5]
- Add support for Oracle Linux 9

[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper

[1.12.1-3]
- updated golang version
- added buildhost variable

[1.12.1-2]
- Golang 1.15.9

[1.12.1-1]
- Added Oracle Specific Build Files for kata-ksm-throttler

kata-proxy
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

[1.12.1-6]
- Revert OL7 removal

[1.12.1-5]
- Add support for Oracle Linux 9

[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper

[1.12.1-3]
- updated golang version
- added buildhost variable

[1.12.1-2]
- Golang 1.15.9

[1.12.1-1]
- Added Oracle Specific Build Files for kata-proxy

kata-runtime
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

[1.12.1-6]
- Add OL9 support

[1.12.1-5]
- Updated qemu-kvm machine options to work with more versions of kvm_utils

[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper

[1.12.1-3]
- updated golang version
- added buildhost variable

[1.12.1-2]
- Golang 1.15.9

[1.12.1-1]
- Added Oracle Specific Files For kata-runtime

kata-shim
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325

[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue

[1.12.1-7]
- Add support for ARM build

[1.12.1-6]
- Bump releaase inline with others for reversion of removal of OL7.

[1.12.1-5]
- Add support for Oracle Linux 9

[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls a

Fixed packages 34

ReleasePackageFixed in
Oracle Linux · 7 conmon 3:2.1.3-8.el7
Oracle Linux · 7 cri-o 0:1.25.5-1.el7
Oracle Linux · 7 cri-tools 0:1.25.0-3.el7
Oracle Linux · 7 flannel-cni-plugin 0:1.0.1-4.el7
Oracle Linux · 7 helm 0:3.11.1-3.el7
Oracle Linux · 7 istio 0:1.16.7-3.el7
Oracle Linux · 7 istio-istioctl 0:1.16.7-3.el7
Oracle Linux · 7 kata 0:1.12.1-17.el7
Oracle Linux · 7 kata-agent 0:1.12.1-11.el7
Oracle Linux · 7 kata-image 0:1.12.1-11.11.ol7_202312212315
Oracle Linux · 7 kata-ksm-throttler 0:1.12.1-11.el7
Oracle Linux · 7 kata-proxy 0:1.12.1-11.el7
Oracle Linux · 7 kata-runtime 0:1.12.1-11.el7
Oracle Linux · 7 kata-shim 0:1.12.1-11.el7
Oracle Linux · 7 kubeadm 0:1.25.15-2.el7
Oracle Linux · 7 kubectl 0:1.25.15-2.el7
Oracle Linux · 7 kubelet 0:1.25.15-2.el7
Oracle Linux · 7 kubernetes-cni 0:1.0.1-4.el7
Oracle Linux · 7 kubernetes-cni-plugins 0:1.0.1-5.el7
Oracle Linux · 7 olcne-agent 0:1.6.6-3.el7
Oracle Linux · 7 olcne-api-server 0:1.6.6-3.el7
Oracle Linux · 7 olcne-calico-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-gluster-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-grafana-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-istio-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-metallb-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-multus-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-nginx 0:1.6.6-3.el7
Oracle Linux · 7 olcne-oci-ccm-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-olm-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-prometheus-chart 0:1.6.6-3.el7
Oracle Linux · 7 olcne-utils 0:1.6.6-3.el7
Oracle Linux · 7 olcnectl 0:1.6.6-3.el7
Oracle Linux · 7 yq 0:4.34.1-4.el7

Vulnerabilities 1