High ELSA-2022-9494 2 CVEs

Important: olcne security update (Oracle Linux 8)

Published Jun 17, 2022 · Updated Jun 17, 2022

Ecosystem: Oracle Linux

Summary

[1.4.5-1]
- Address qemu CVE-2022-26353, CVE-2021-3748

Fixed packages 11

Release	Package	Fixed in
Oracle Linux · 8	olcne-agent	0:1.4.5-1.el8
Oracle Linux · 8	olcne-api-server	0:1.4.5-1.el8
Oracle Linux · 8	olcne-gluster-chart	0:1.4.5-1.el8
Oracle Linux · 8	olcne-grafana-chart	0:1.4.5-1.el8
Oracle Linux · 8	olcne-istio-chart	0:1.4.5-1.el8
Oracle Linux · 8	olcne-nginx	0:1.4.5-1.el8
Oracle Linux · 8	olcne-oci-csi-chart	0:1.4.5-1.el8
Oracle Linux · 8	olcne-olm-chart	0:1.4.5-1.el8
Oracle Linux · 8	olcne-prometheus-chart	0:1.4.5-1.el8
Oracle Linux · 8	olcne-utils	0:1.4.5-1.el8
Oracle Linux · 8	olcnectl	0:1.4.5-1.el8

Vulnerabilities 2

Unscored —

CVE-2021-3748

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address…

qemu qemu qemu Virtualization Debian Ubuntu Azure Linux

Mar 23, 2022
Unscored —

CVE-2022-26353

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-374…

qemu qemu qemu Virtualization Debian Ubuntu Azure Linux

Mar 16, 2022