Lucene search

K
oraclelinuxOracleLinuxELSA-2023-13053
HistoryDec 19, 2023 - 12:00 a.m.

conmon security update

2023-12-1900:00:00
linux.oracle.com
13
conmon
cri-o
cri-tools
etcd
flannel-cni-plugin
helm
istio
kata
kata-agent
kata-image
kata-ksm-throttler
kata-proxy
kata-runtime
kata-shim
kubernetes
kubernetes-cni
kubernetes-cni-plugins
kubevirt
olcne
yq
cve-2023-39325
cve-2023-44487
arm build

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.72 High

EPSS

Percentile

98.0%

conmon
[2.1.3-7]

  • Resolve CVE-2023-39325
    [2.1.3-6]
  • Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile
    [2.1.3-5]
  • Add systemd-devel as build requirement
    [2.1.3-4]
  • Add support ARM build
    cri-o
    [1.26.3-3]
  • Resolve CVE-2023-39325
    [1.26.3-2]
  • Add support for ARM build
    cri-tools
    [1.26.1-3]
  • Resolve CVE-2023-39325
    [1.26.1-2]
  • Add ARM build support
    etcd
    [3.5.9-2]
  • Bump up version
    [3.5.9-1]
  • Added Oracle specific build files
    flannel-cni-plugin
    [1.1.2-3]
  • Resolve CVE-2023-44487 and CVE-2023-39325
    [1.1.2-2]
  • Add ARM build support
    helm
    [3.12.0-3]
  • address CVE-2023-44487 and CVE-2023-39325
    [-]
  • Add support for ARM build
    istio
    [1.17.8-1]
  • Added Oracle specific files for 1.17.8-1
    kata
    [1.12.1-14]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    [1.12.1-13]
  • Rebuild kata to fix timestamp issue
    [1.12.1-12]
  • Add support for ARM build
    kata-agent
    [1.12.1-9]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    [1.12.1-8]
  • Remove build_date global variable in kata-image specfile
    [1.12.1-7]
  • Add support for ARM build
    kata-image
    [1.12.1-9]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    [1.12.1-8]
  • Remove build_date global variable in specfile
    [1.12.1-7]
  • Add support for ARM build
    kata-ksm-throttler
    [1.12.1-9]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    [1.12.1-8]
  • Bump release inline with other kata packages for fixing timestamp issue
    [1.12.1-7]
  • Add support for ARM build
    kata-proxy
    [1.12.1-9]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    [1.12.1-8]
  • Bump release inline with other kata packages for fixing timestamp issue
    [1.12.1-7]
  • Add support for ARM build
    kata-runtime
    [1.12.1-9]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    [1.12.1-8]
  • Bump release inline with other kata packages for fixing timestamp issue
    [1.12.1-7]
  • Add support for ARM build
    kata-shim
    [1.12.1-9]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    [1.12.1-8]
  • Bump release inline with other kata packages for fixing timestamp issue
    [1.12.1-7]
  • Add support for ARM build
    kubernetes
    [1.26.10-2]
  • Allow dashes DNS image
    [1.26.10-1]
  • Added Oracle specific build files for Kubernetes
    kubernetes-cni
    [1.1.2-3]
  • Resolve CVE-2023-44487 and CVE-2023-39325
    [1.1.2-2]
  • Add support for ARM build
    kubernetes-cni-plugins
    [1.2.0-4]
  • Fix go.mod
    [1.2.0-3]
  • Resolve CVE-2023-44487 and CVE-2023-39325
    [1.2.0-2]
  • Add support for ARM build
    [1.2.0-1]
  • Added Oracle specific build files for Kubernetes CNI Plugins
    kubevirt
    [0.58.0-4]
  • Updated to address CVE-2023-44487 and CVE-2023-39325
    olcne
    [1.7.5-17]
  • Fix update issue from 1.6.x -> 1.7.5
    [1.7.5-16]
  • Pass imagetag to the metallb tool that converts configmap to crs
    [1.7.5-15]
  • Fix metallb upgrade failure when proxy is needed
    [1.7.5-14]
  • Update conmon to 2.1.3-7 in scripts
    [1.7.5-13]
  • Update module-operator to address CVE-2023-44487, CVE-2023-39325
    [1.7.5-12]
  • Update multus-cni 3.9.3 to address CVE-2023-44487 and CVE-2023-39325
    [1.7.5-11]
  • Update multus-cni 4.0.1 to address CVE-2023-44487 and CVE-2023-39325
    [1.7.5-10]
  • Update metallb 0.13.9 to address CVE-2023-44487 and CVE-2023-39325
    [1.7.5-9]
  • Update externalip-webhook 1.0.0 to address CVE-2023-44487 and CVE-2023-39325
    [1.7.5-8]
  • Update calico-3.25.0 and 3.25.1 to address CVE-2023-44487, CVE-2023-39325
    [1.7.5-7]
  • Update rook-1.10.9 and 1.11.6 to address golang CVE-2023-44487, CVE-2023-39325
    [1.7.5-6]
  • update configmap-registry to 1.28.0 and update olm 0.23.1 to address CVE-2023-44487 and CVE-2023-39325
    [1.7.5-5]
  • Update Istio, Grafana, Prometheus, and Kubernetes-dashboard to address CVE’s
  • CVE-2023-44487
  • CVE-2023-39325
    [1.7.5-4]
  • update helm 3.12.0 to Address CVE-2023-44487 and CVE-2023-39325
    [1.7.5-3]
  • Update kubernetes and components to address golang CVE-2023-44487, CVE-2023-39325
    [1.7.5-2]
  • Add olm 0.23.1 charts
    [1.7.5-1]
  • Update kubevirt 0.58.0 to address CVE-2023-44487 and CVE-2023-39325
    yq
    [4.34.1-3]
  • address CVE-2023-44487 and CVE-2023-3932A
    [4.34.1-2]
  • Add support for ARM build

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.72 High

EPSS

Percentile

98.0%