Skip to content
OpenAdvisories
High ELSA-2021-9397 6 CVEs

Important: olcne security update (Oracle Linux 7)

Published Aug 6, 2021 · Updated Aug 6, 2021

Ecosystem: Oracle Linux

Summary

olcne
[1.2.4-5]
- Updated registry-image-helper.sh to work with olcne-utils

[1.2.4-4]
- Fix istio template for 1.9.6 for k8s update failure

[1.2.4-3]
- Fixed yaml file to stop olcne-nginx and keepalived services at uninstall [Orabug: 32296282]

[1.2.4-2]
- Fix iptables issue when running on OL7 host using OL8 image

[1.2.4-1]
- Address Istio CVE's CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824

istio
[1.9.6-2]
- Fix iptables issue when running on OL7 host using OL8 image
- Added istio-mixs and istio-mixc to Obsoletes list

[1.9.6-1]
- Address CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824

kubernetes
[1.18.18-3]
- Fix iptables OL7 host kernel issue when running with OL8 image

[1.18.18-1]
- Address CVE-2021-27918

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 istio 0:1.9.6-2.el7
Oracle Linux · 7 istio-istioctl 0:1.9.6-2.el7
Oracle Linux · 7 kubeadm 0:1.18.18-3.el7
Oracle Linux · 7 kubectl 0:1.18.18-3.el7
Oracle Linux · 7 kubelet 0:1.18.18-3.el7
Oracle Linux · 7 olcne-agent 0:1.2.4-5.el7
Oracle Linux · 7 olcne-api-server 0:1.2.4-5.el7
Oracle Linux · 7 olcne-istio-chart 0:1.2.4-5.el7
Oracle Linux · 7 olcne-nginx 0:1.2.4-5.el7
Oracle Linux · 7 olcne-prometheus-chart 0:1.2.4-5.el7
Oracle Linux · 7 olcne-utils 0:1.2.4-5.el7
Oracle Linux · 7 olcnectl 0:1.2.4-5.el7

Vulnerabilities 6

  • Unscored —
    CVE-2021-28682

    An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large…

  • Unscored —
    CVE-2021-28683

    An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in …

  • Unscored —
    CVE-2021-29258

    An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty MET…

  • Unscored —
    CVE-2021-31920

    Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with mult…

  • Unscored —
    CVE-2021-31921

    Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can ac…

  • Unscored —
    CVE-2021-34824 Public exploit

    Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified …