Summary
olcne
[1.4.3-1]
- Update Istio to 1.13.2
istio
[1.12.6-1]
- Addresses CVE-2022-24726, CVE-2022-24921
istio
[1.13.2-1]
- Added Oracle specific files for 1.13.2-1
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | istio | 0:1.13.2-1.el8 |
| Oracle Linux · 7 | istio-istioctl | 0:1.13.2-1.el8 |
| Oracle Linux · 7 | olcne-agent | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-api-server | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-gluster-chart | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-grafana-chart | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-istio-chart | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-nginx | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-oci-csi-chart | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-olm-chart | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-prometheus-chart | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcne-utils | 0:1.4.3-1.el8 |
| Oracle Linux · 7 | olcnectl | 0:1.4.3-1.el8 |
Vulnerabilities 2
-
High 7.5
Unauthenticated control plane denial of service attack in Istio
Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, istiod, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in th…
-
Unscored —
Stack exhaustion when compiling deeply nested expressions in regexp
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.