Summary
olcne
[1.1.5-2]
- kubernetes pod subnet flag not honored in flannel configuration
[1.1.5-1]
- Address CVE-2020-16845
conmon
[2.0.10-3]
- Address CVE-2020-16845
coredns
[1.6.5-1.0.3]
- Address CVE-2020-16845
cri-o
[1.17.0-1.0.5]
- Address CVE-2020-16845
cri-tools
[1.17.0-1.0.2]
- Address CVE-2020-16845
[1.17.0-1.0.1]
- Added Oracle Specific Build Files for cri-tools
etcd
[3.4.3-1.0.2]
- Address CVE-2020-16845
flannel
[0.10.0-2.1.12]
- Address CVE-2020-16845
[0.10.0-2.1.11]
- Resize flannel image
[0.10.0-2.1.10]
- Fix image location
grafana
[6.7.4-1.0.2]
- Address CVE-2020-16845
helm
[3.1.1-1.0.2]
- Address CVE-2020-16845
istio
[1.4.10-1.0.2]
- CVE-2020-16845
encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs
kata
[1.7.3-1.0.9]
- Address CVE-2020-16845
kata-agent
[1.7.3-1.0.6]
- Address CVE-2020-16845
kata-image
[1.7.3-1.0.6.1]
- Address CVE-2020-16845
kata-ksm-throttler
[1.7.3-1.0.5]
- Address CVE-2020-16845
kata-proxy
[1.7.3-1.0.5]
- Address CVE-2020-16845
kata-runtime
[1.7.3-1.0.6]
- Address CVE-2020-16845
kata-shim
[1.7.3-1.0.5]
- Address CVE-2020-16845
kubernetes
[1.17.9-1.0.5]
- Pin min version of components
[1.17.9-1.0.4]
- Address CVE-2020-16845
kubernetes-cni
[0.7.1-1.0.3]
- Pin min version of cni-plugins
[0.7.1-1.0.2]
- Address CVE-2020-16845
kubernetes-cni-plugins
[0.8.6-1.0.3]
- Address CVE-2020-16845
kubernetes-dashboard
[2.0.0-1.0.2]
- Address CVE-2020-16845
prometheus
[2.13.1-1.0.3]
- Address CVE-2020-16845
yq
[2.4.0-1.0.5]
- Address CVE-2020-16845
Fixed packages 41
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | conmon | 0:2.0.10-3.el7 |
| Oracle Linux · 7 | coredns | 0:1.6.5-1.0.3.el7 |
| Oracle Linux · 7 | cri-o | 0:1.17.0-1.0.5.el7 |
| Oracle Linux · 7 | cri-tools | 0:1.17.0-1.0.2.el7 |
| Oracle Linux · 7 | etcd | 0:3.4.3-1.0.2.el7 |
| Oracle Linux · 7 | flannel | 0:0.10.0-2.1.12.el7 |
| Oracle Linux · 7 | grafana | 0:6.7.4-1.0.2.el7 |
| Oracle Linux · 7 | helm | 0:3.1.1-1.0.2.el7 |
| Oracle Linux · 7 | istio | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-citadel | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-galley | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-istioctl | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-mixc | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-mixs | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-node-agent | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-pilot-agent | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-pilot-discovery | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-proxy-init | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | istio-sidecar-injector | 0:1.4.10-1.0.2.el7 |
| Oracle Linux · 7 | kata | 0:1.7.3-1.0.9.el7 |
| Oracle Linux · 7 | kata-agent | 0:1.7.3-1.0.6.el7 |
| Oracle Linux · 7 | kata-image | 0:1.7.3-1.0.6.1.ol7_202008171204 |
| Oracle Linux · 7 | kata-ksm-throttler | 0:1.7.3-1.0.5.el7 |
| Oracle Linux · 7 | kata-proxy | 0:1.7.3-1.0.5.el7 |
| Oracle Linux · 7 | kata-runtime | 0:1.7.3-1.0.6.el7 |
| Oracle Linux · 7 | kata-shim | 0:1.7.3-1.0.5.el7 |
| Oracle Linux · 7 | kubeadm | 0:1.17.9-1.0.5.el7 |
| Oracle Linux · 7 | kubectl | 0:1.17.9-1.0.5.el7 |
| Oracle Linux · 7 | kubelet | 0:1.17.9-1.0.5.el7 |
| Oracle Linux · 7 | kubernetes-cni | 0:0.7.1-1.0.3.el7 |
| Oracle Linux · 7 | kubernetes-cni-plugins | 0:0.8.6-1.0.3.el7 |
| Oracle Linux · 7 | kubernetes-dashboard | 0:2.0.0-1.0.2.el7 |
| Oracle Linux · 7 | olcne-agent | 0:1.1.5-2.el7 |
| Oracle Linux · 7 | olcne-api-server | 0:1.1.5-2.el7 |
| Oracle Linux · 7 | olcne-istio-chart | 0:1.1.5-2.el7 |
| Oracle Linux · 7 | olcne-nginx | 0:1.1.5-2.el7 |
| Oracle Linux · 7 | olcne-prometheus-chart | 0:1.1.5-2.el7 |
| Oracle Linux · 7 | olcne-utils | 0:1.1.5-2.el7 |
| Oracle Linux · 7 | olcnectl | 0:1.1.5-2.el7 |
| Oracle Linux · 7 | prometheus | 0:2.13.1-1.0.3.el7 |
| Oracle Linux · 7 | yq | 0:2.4.0-1.0.5.el7 |
Vulnerabilities 1
-
Unscored —
Unbounded read from invalid inputs in encoding/binary
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.