Skip to content
OpenAdvisories
High ELSA-2024-12226 1 CVE

Important: conmon security update (Oracle Linux 8)

Published Mar 19, 2024 · Updated Mar 19, 2024

Summary

conmon
[2.1.3-8]
- address CVE-2023-39326

cri-o
[1.26.4-1]
- Added Oracle Specific Files for cri-o
- Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185
- Fixed CVE-2023-39325: bump golang.org/x/net to v0.17.0

cri-tools
[1.26.1-4]
- Address CVE-2023-39326

etcd
[3.5.9-3]
- Address CVE-2023-39326 by upgrading golang to version 1.20.12

flannel-cni-plugin
[1.2.0-3]
- Build for aarch64

[1.2.0-2]
- Rebuild with golang 1.20.12

[1.2.0-1]
- Added Oracle specific build files for Flannel CNI Plugins
- Address CVE-2023-44487 and CVE-2023-39325

helm
[3.12.0-4]
- address CVE-2023-39326 by updating golang version to 1.20.12

istio
[1.17.8-2]
- Address CVE-2023-39326

kata
[1.12.1-17]
- Include OL9 for kernel-uek-container (currently in UEKR7_developer_preview)

[1.12.1-16]
- Rebuild with golang 1.20.12

[1.12.1-15]
- Updated for kubernetes 1.27 and 1.28

kata-agent
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

kata-image
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

kata-ksm-throttler
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

kata-proxy
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

kata-runtime
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

kata-shim
[1.12.1-11]
- Rebuild with -11 tag

[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326

kubernetes
[1.26.10-3]
- Build with golang 1.20.12

kubernetes-cni
[1.1.2-4]
- Address CVE-2023-39326, update golang version to 1.20.12

kubernetes-cni-plugins
[1.2.0-6]
- Rebuild with golang 1.20.12

[1.2.0-5]
- update flannel-cni-plugin to 1.2.0

kubevirt
[0.58.0-5]
- Updated to address CVE-2023-39326

olcne
[1.7.6-5]
- Fix OLM upgrade failure

[1.7.6-4]
- Fixed unable to deploy new module(s) using config file containing already existing modules

[1.7.6-2]
- Corrected olcne repo version in the prompt text of the 'olcnectl provision' command

[1.7.6-1]
- Update kubernetes and components to address golang CVE-2023-39326
- Update istio and components to address golang CVE-2023-39326
- Update metallb, multus-cni, kubevirt, module-operator, calico, rook to address golang CVE-2023-39326
- Update cri-o to 1.26-4 patched
- add conmon resource to kubernetes module

[1.7.5-22]
- Fix OLM upgrade failure - same version upgrade

[1.7.5-21]
- Migrate ModuleOperator from verrazzano-install to ocne-modules namespace

[1.7.5-20]
- Update module-operator to address CVE-2023-39326

[1.7.5-19]
- Updated kubevirt 0.58.0 to address CVE-2023-39326

[1.7.5-18]
- Back port rebuild of calico 3.25.1

yq
[4.34.1-4]
- Update Golang to 1.20.12 to address CVE-2023-39326

Fixed packages 38

ReleasePackageFixed in
Oracle Linux · 8 conmon 3:2.1.3-8.el8
Oracle Linux · 8 cri-o 0:1.26.4-1.el8
Oracle Linux · 8 cri-tools 0:1.26.1-4.el8
Oracle Linux · 8 etcd 0:3.5.9-3.el8
Oracle Linux · 8 flannel-cni-plugin 0:1.2.0-3.el8
Oracle Linux · 8 helm 0:3.12.0-4.el8
Oracle Linux · 8 istio 0:1.17.8-2.el8
Oracle Linux · 8 istio-istioctl 0:1.17.8-2.el8
Oracle Linux · 8 kata 0:1.12.1-17.el8
Oracle Linux · 8 kata-agent 0:1.12.1-11.el8
Oracle Linux · 8 kata-image 0:1.12.1-11.11.ol8_202312212317
Oracle Linux · 8 kata-ksm-throttler 0:1.12.1-11.el8
Oracle Linux · 8 kata-proxy 0:1.12.1-11.el8
Oracle Linux · 8 kata-runtime 0:1.12.1-11.el8
Oracle Linux · 8 kata-shim 0:1.12.1-11.el8
Oracle Linux · 8 kubeadm 0:1.26.10-3.el8
Oracle Linux · 8 kubectl 0:1.26.10-3.el8
Oracle Linux · 8 kubelet 0:1.26.10-3.el8
Oracle Linux · 8 kubernetes-cni 0:1.1.2-4.el8
Oracle Linux · 8 kubernetes-cni-plugins 0:1.2.0-6.el8
Oracle Linux · 8 olcne-agent 0:1.7.6-5.el8
Oracle Linux · 8 olcne-api-server 0:1.7.6-5.el8
Oracle Linux · 8 olcne-calico-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-gluster-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-grafana-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-istio-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-kubevirt-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-metallb-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-multus-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-nginx 0:1.7.6-5.el8
Oracle Linux · 8 olcne-oci-ccm-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-olm-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-prometheus-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-rook-chart 0:1.7.6-5.el8
Oracle Linux · 8 olcne-utils 0:1.7.6-5.el8
Oracle Linux · 8 olcnectl 0:1.7.6-5.el8
Oracle Linux · 8 virtctl 0:0.58.0-5.el8
Oracle Linux · 8 yq 0:4.34.1-4.el8

Vulnerabilities 1