Summary
istio
[1.15.3-1]
- Added Oracle specific files for 1.15.3-1
olcne
[1.5.10-2]
- Update istio to 1.15.3 to address Istio CVE-2022-39278
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | istio | 0:1.15.3-1.el8 |
| Oracle Linux · 8 | istio-istioctl | 0:1.15.3-1.el8 |
| Oracle Linux · 8 | olcne-agent | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-api-server | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-gluster-chart | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-grafana-chart | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-istio-chart | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-metallb-chart | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-nginx | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-oci-ccm-chart | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-olm-chart | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-prometheus-chart | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcne-utils | 0:1.5.10-2.el8 |
| Oracle Linux · 8 | olcnectl | 0:1.5.10-2.el8 |
Vulnerabilities 1
-
High 7.5
Istio vulnerable to denial of service attack due to Golang Regex Library
Istio is an open platform-independent service mesh that provides traffic management, policy enforcement, and telemetry collection. Prior to versions 1.15.2, 1.14.5, and 1.13.9, the Istio control plane, istiod, is vulnerable to a request processing error, allo…