Skip to content
OpenAdvisories
High ELSA-2020-5827 1 CVE

Important: olcne conmon coredns cri-o cri-tools etcd flannel grafana helm istio kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard prometheus yq security update (Oracle Linux 7)

Published Aug 31, 2020 · Updated Aug 31, 2020

Summary

olcne
[1.1.5-2]
- kubernetes pod subnet flag not honored in flannel configuration

[1.1.5-1]
- Address CVE-2020-16845

conmon
[2.0.10-3]
- Address CVE-2020-16845

coredns
[1.6.5-1.0.3]
- Address CVE-2020-16845

cri-o
[1.17.0-1.0.5]
- Address CVE-2020-16845

cri-tools
[1.17.0-1.0.2]
- Address CVE-2020-16845

[1.17.0-1.0.1]
- Added Oracle Specific Build Files for cri-tools

etcd
[3.4.3-1.0.2]
- Address CVE-2020-16845

flannel
[0.10.0-2.1.12]
- Address CVE-2020-16845

[0.10.0-2.1.11]
- Resize flannel image

[0.10.0-2.1.10]
- Fix image location

grafana
[6.7.4-1.0.2]
- Address CVE-2020-16845

helm
[3.1.1-1.0.2]
- Address CVE-2020-16845

istio
[1.4.10-1.0.2]
- CVE-2020-16845
encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

kata
[1.7.3-1.0.9]
- Address CVE-2020-16845

kata-agent
[1.7.3-1.0.6]
- Address CVE-2020-16845

kata-image
[1.7.3-1.0.6.1]
- Address CVE-2020-16845

kata-ksm-throttler
[1.7.3-1.0.5]
- Address CVE-2020-16845

kata-proxy
[1.7.3-1.0.5]
- Address CVE-2020-16845

kata-runtime
[1.7.3-1.0.6]
- Address CVE-2020-16845

kata-shim
[1.7.3-1.0.5]
- Address CVE-2020-16845

kubernetes
[1.17.9-1.0.5]
- Pin min version of components

[1.17.9-1.0.4]
- Address CVE-2020-16845

kubernetes-cni
[0.7.1-1.0.3]
- Pin min version of cni-plugins

[0.7.1-1.0.2]
- Address CVE-2020-16845

kubernetes-cni-plugins
[0.8.6-1.0.3]
- Address CVE-2020-16845

kubernetes-dashboard
[2.0.0-1.0.2]
- Address CVE-2020-16845

prometheus
[2.13.1-1.0.3]
- Address CVE-2020-16845

yq
[2.4.0-1.0.5]
- Address CVE-2020-16845

Fixed packages 41

ReleasePackageFixed in
Oracle Linux · 7 conmon 0:2.0.10-3.el7
Oracle Linux · 7 coredns 0:1.6.5-1.0.3.el7
Oracle Linux · 7 cri-o 0:1.17.0-1.0.5.el7
Oracle Linux · 7 cri-tools 0:1.17.0-1.0.2.el7
Oracle Linux · 7 etcd 0:3.4.3-1.0.2.el7
Oracle Linux · 7 flannel 0:0.10.0-2.1.12.el7
Oracle Linux · 7 grafana 0:6.7.4-1.0.2.el7
Oracle Linux · 7 helm 0:3.1.1-1.0.2.el7
Oracle Linux · 7 istio 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-citadel 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-galley 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-istioctl 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-mixc 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-mixs 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-node-agent 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-pilot-agent 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-pilot-discovery 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-proxy-init 0:1.4.10-1.0.2.el7
Oracle Linux · 7 istio-sidecar-injector 0:1.4.10-1.0.2.el7
Oracle Linux · 7 kata 0:1.7.3-1.0.9.el7
Oracle Linux · 7 kata-agent 0:1.7.3-1.0.6.el7
Oracle Linux · 7 kata-image 0:1.7.3-1.0.6.1.ol7_202008171204
Oracle Linux · 7 kata-ksm-throttler 0:1.7.3-1.0.5.el7
Oracle Linux · 7 kata-proxy 0:1.7.3-1.0.5.el7
Oracle Linux · 7 kata-runtime 0:1.7.3-1.0.6.el7
Oracle Linux · 7 kata-shim 0:1.7.3-1.0.5.el7
Oracle Linux · 7 kubeadm 0:1.17.9-1.0.5.el7
Oracle Linux · 7 kubectl 0:1.17.9-1.0.5.el7
Oracle Linux · 7 kubelet 0:1.17.9-1.0.5.el7
Oracle Linux · 7 kubernetes-cni 0:0.7.1-1.0.3.el7
Oracle Linux · 7 kubernetes-cni-plugins 0:0.8.6-1.0.3.el7
Oracle Linux · 7 kubernetes-dashboard 0:2.0.0-1.0.2.el7
Oracle Linux · 7 olcne-agent 0:1.1.5-2.el7
Oracle Linux · 7 olcne-api-server 0:1.1.5-2.el7
Oracle Linux · 7 olcne-istio-chart 0:1.1.5-2.el7
Oracle Linux · 7 olcne-nginx 0:1.1.5-2.el7
Oracle Linux · 7 olcne-prometheus-chart 0:1.1.5-2.el7
Oracle Linux · 7 olcne-utils 0:1.1.5-2.el7
Oracle Linux · 7 olcnectl 0:1.1.5-2.el7
Oracle Linux · 7 prometheus 0:2.13.1-1.0.3.el7
Oracle Linux · 7 yq 0:2.4.0-1.0.5.el7

Vulnerabilities 1