{
  "cves": [
    "CVE-2023-44487",
    "CVE-2023-39325"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "conmon\n[2.1.3-7]\n- Resolve CVE-2023-39325\n\n[2.1.3-6]\n- Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile\n\n[2.1.3-5]\n- Add systemd-devel as build requirement\n\n[2.1.3-4]\n- Add support ARM build\n\ncri-o\n[1.26.3-3]\n- Resolve CVE-2023-39325\n\n[1.26.3-2]\n- Add support for ARM build\n\ncri-tools\n[1.26.1-3]\n- Resolve CVE-2023-39325\n\n[1.26.1-2]\n- Add ARM build support\n\netcd\n[3.5.9-2]\n- Bump up version\n\n[3.5.9-1]\n- Added Oracle specific build files\n\nflannel-cni-plugin\n[1.1.2-3]\n- Resolve CVE-2023-44487 and CVE-2023-39325\n\n[1.1.2-2]\n- Add ARM build support\n\nhelm\n[3.12.0-3]\n- address CVE-2023-44487 and CVE-2023-39325\n\n[-]\n- Add support for ARM build\n\nistio\n[1.17.8-1]\n- Added Oracle specific files for 1.17.8-1\n\nkata\n[1.12.1-14]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\n[1.12.1-13]\n- Rebuild kata to fix timestamp issue\n\n[1.12.1-12]\n- Add support for ARM build\n\nkata-agent\n[1.12.1-9]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\n[1.12.1-8]\n- Remove build_date global variable in kata-image specfile\n\n[1.12.1-7]\n- Add support for ARM build\n\nkata-image\n[1.12.1-9]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\n[1.12.1-8]\n- Remove build_date global variable in specfile\n\n[1.12.1-7]\n- Add support for ARM build\n\nkata-ksm-throttler\n[1.12.1-9]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\n[1.12.1-8]\n- Bump release inline with other kata packages for fixing timestamp issue\n\n[1.12.1-7]\n- Add support for ARM build\n\nkata-proxy\n[1.12.1-9]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\n[1.12.1-8]\n- Bump release inline with other kata packages for fixing timestamp issue\n\n[1.12.1-7]\n- Add support for ARM build\n\nkata-runtime\n[1.12.1-9]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\n[1.12.1-8]\n- Bump release inline with other kata packages for fixing timestamp issue\n\n[1.12.1-7]\n- Add support for ARM build\n\nkata-shim\n[1.12.1-9]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\n[1.12.1-8]\n- Bump release inline with other kata packages for fixing timestamp issue\n\n[1.12.1-7]\n- Add support for ARM build\n\nkubernetes\n[1.26.10-2]\n- Allow dashes DNS image\n\n[1.26.10-1]\n- Added Oracle specific build files for Kubernetes\n\nkubernetes-cni\n[1.1.2-3]\n- Resolve CVE-2023-44487 and CVE-2023-39325\n\n[1.1.2-2]\n- Add support for ARM build\n\nkubernetes-cni-plugins\n[1.2.0-4]\n- Fix go.mod\n\n[1.2.0-3]\n- Resolve CVE-2023-44487 and CVE-2023-39325\n\n[1.2.0-2]\n- Add support for ARM build\n\nkubevirt\n[0.58.0-4]\n- Updated to address CVE-2023-44487 and CVE-2023-39325\n\nolcne\n[1.7.5-17]\n- Fix update issue from 1.6.x - 1.7.5\n\n[1.7.5-16]\n- Pass imagetag to the metallb tool that converts configmap to crs\n\n[1.7.5-15]\n- Fix metallb upgrade failure when proxy is needed\n\n[1.7.5-14]\n- Update conmon to 2.1.3-7 in scripts\n\n[1.7.5-13]\n- Update module-operator to address CVE-2023-44487, CVE-2023-39325\n\n[1.7.5-12]\n- Update multus-cni 3.9.3 to address CVE-2023-44487 and CVE-2023-39325\n\n[1.7.5-11]\n- Update multus-cni 4.0.1 to address CVE-2023-44487 and CVE-2023-39325\n\n[1.7.5-10]\n- Update metallb 0.13.9 to address CVE-2023-44487 and CVE-2023-39325\n\n[1.7.5-9]\n- Update externalip-webhook 1.0.0 to address CVE-2023-44487 and CVE-2023-39325\n\n[1.7.5-8]\n- Update calico-3.25.0 and 3.25.1 to address CVE-2023-44487, CVE-2023-39325\n\n[1.7.5-7]\n- Update rook-1.10.9  and 1.11.6 to address golang CVE-2023-44487, CVE-2023-39325\n\n[1.7.5-6]\n- update configmap-registry to 1.28.0 and update olm 0.23.1 to address CVE-2023-44487 and CVE-2023-39325\n\n[1.7.5-5]\n- Update Istio, Grafana, Prometheus, and Kubernetes-dashboard to address CVE's\n- CVE-2023-44487\n- CVE-2023-39325\n\n[1.7.5-4]\n- update helm 3.12.0 to Address CVE-2023-44487 and CVE-2023-39325\n\n[1.7.5-3]\n- Update kubernetes and components to address golang CVE-2023-44487, CVE-2023-39325\n\n[1.7.5-2]\n- Add olm 0.23.1 charts\n\n[1.7.5-1]\n- Update kubevirt 0.58.0 to address CVE-2023-44487 and CVE-2023-39325\n\nyq\n[4.34.1-3]\n- address CVE-2023-44487 and CVE-2023-3932A\n\n[4.34.1-2]\n- Add support for ARM build",
  "id": "ELSA-2023-13054",
  "ovalId": "oval:com.oracle.elsa:def:202313054",
  "source": "oracle_linux",
  "title": "ELSA-2023-13054: conmon security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2023-13054.html"
}