Lucene search

OracleLinuxELSA-2024-12190

HistoryMar 01, 2024 - 12:00 a.m.

conmon security update

2024-03-0100:00:00

linux.oracle.com

security updates

conmon

cri-o

cri-tools

flannel-cni-plugin

helm

istio

kata

kata-agent

kata-image

kata-ksm-throttler

kata-proxy

kata-runtime

kata-shim

kubernetes

kubernetes-cni

kubernetes-cni-plugins

olcne

cve-2023-39326

golang

oracle specifile files

kernel-uek-container

uekr7_developer_preview

pod-network:calico

unix

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.4%

JSON

conmon
[2.1.3-8]

address CVE-2023-39326
cri-o
[1.25.5-1]
Added Oracle Specifile Files for cri-o
cri-tools
[1.25.0-3]
Resolve CVE-2023-39326
flannel-cni-plugin
[1.0.1-4]
Resolve CVE-2023-39326
helm
[3.11.1-3]
address CVE-2023-39326
istio
[1.16.7-3]
Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata
[1.12.1-17]
Include OL9 for kernel-uek-container (currently in UEKR7_developer_preview)
kata-agent
[1.12.1-11]
Rebuild with -11 tag
[1.12.1-10]
Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-image
[1.12.1-11]
Rebuild with -11 tag
[1.12.1-10]
Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-ksm-throttler
[1.12.1-11]
Rebuild with -11 tag
[1.12.1-10]
Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-proxy
[1.12.1-11]
Rebuild with -11 tag
[1.12.1-10]
Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-runtime
[1.12.1-11]
Rebuild with -11 tag
[1.12.1-10]
Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-shim
[1.12.1-11]
Rebuild with -11 tag
[1.12.1-10]
Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kubernetes
[1.25.15-2]
Address CVE-2023-39326 by upgrading golang to 1.20.12
kubernetes-cni
[1.0.1-4]
address CVE-2023-39326
kubernetes-cni-plugins
[1.0.1-5]
address CVE-2023-39326
olcne
[1.6.6-3]
Fixed pod-network:calico update
yq
[4.34.1-4]
Update Golang to 1.20.12 to address CVE-2023-39326

OSVersionArchitecturePackageVersionFilename
oracle linux8srcconmon< 2.1.3-8.el8conmon-2.1.3-8.el8.src.rpm
oracle linux8srckata< 1.12.1-17.el8kata-1.12.1-17.el8.src.rpm
oracle linux8srckata-agent< 1.12.1-11.el8kata-agent-1.12.1-11.el8.src.rpm
oracle linux8srckata-image< 1.12.1-11.11.ol8_202312212317kata-image-1.12.1-11.11.ol8_202312212317.src.rpm
oracle linux8srckata-ksm-throttler< 1.12.1-11.el8kata-ksm-throttler-1.12.1-11.el8.src.rpm
oracle linux8srckata-proxy< 1.12.1-11.el8kata-proxy-1.12.1-11.el8.src.rpm
oracle linux8srckata-runtime< 1.12.1-11.el8kata-runtime-1.12.1-11.el8.src.rpm
oracle linux8srckata-shim< 1.12.1-11.el8kata-shim-1.12.1-11.el8.src.rpm
oracle linux8aarch64conmon< 2.1.3-8.el8conmon-2.1.3-8.el8.aarch64.rpm
oracle linux8aarch64kata< 1.12.1-17.el8kata-1.12.1-17.el8.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	conmon	< 2.1.3-8.el8	conmon-2.1.3-8.el8.src.rpm
oracle linux	8	src	kata	< 1.12.1-17.el8	kata-1.12.1-17.el8.src.rpm
oracle linux	8	src	kata-agent	< 1.12.1-11.el8	kata-agent-1.12.1-11.el8.src.rpm
oracle linux	8	src	kata-image	< 1.12.1-11.11.ol8_202312212317	kata-image-1.12.1-11.11.ol8_202312212317.src.rpm
oracle linux	8	src	kata-ksm-throttler	< 1.12.1-11.el8	kata-ksm-throttler-1.12.1-11.el8.src.rpm
oracle linux	8	src	kata-proxy	< 1.12.1-11.el8	kata-proxy-1.12.1-11.el8.src.rpm
oracle linux	8	src	kata-runtime	< 1.12.1-11.el8	kata-runtime-1.12.1-11.el8.src.rpm
oracle linux	8	src	kata-shim	< 1.12.1-11.el8	kata-shim-1.12.1-11.el8.src.rpm
oracle linux	8	aarch64	conmon	< 2.1.3-8.el8	conmon-2.1.3-8.el8.aarch64.rpm
oracle linux	8	aarch64	kata	< 1.12.1-17.el8	kata-1.12.1-17.el8.aarch64.rpm