Skip to content
OpenAdvisories
High ELSA-2023-12014 1 CVE

Important: istio security update (Oracle Linux 8)

Published Jan 11, 2023 · Updated Jan 11, 2023

Ecosystem: Oracle Linux

Summary

istio
[1.13.9-1]
- Added Oracle specific files for 1.13.9-1

olcne
[1.4.10-1]
- Upgraded istio-1.13.7 to istio-1.13.9 to resolve Istio CVE-2022-39278

Fixed packages 13

ReleasePackageFixed in
Oracle Linux · 8 istio 0:1.13.9-1.el8
Oracle Linux · 8 istio-istioctl 0:1.13.9-1.el8
Oracle Linux · 8 olcne-agent 0:1.4.10-1.el8
Oracle Linux · 8 olcne-api-server 0:1.4.10-1.el8
Oracle Linux · 8 olcne-gluster-chart 0:1.4.10-1.el8
Oracle Linux · 8 olcne-grafana-chart 0:1.4.10-1.el8
Oracle Linux · 8 olcne-istio-chart 0:1.4.10-1.el8
Oracle Linux · 8 olcne-nginx 0:1.4.10-1.el8
Oracle Linux · 8 olcne-oci-csi-chart 0:1.4.10-1.el8
Oracle Linux · 8 olcne-olm-chart 0:1.4.10-1.el8
Oracle Linux · 8 olcne-prometheus-chart 0:1.4.10-1.el8
Oracle Linux · 8 olcne-utils 0:1.4.10-1.el8
Oracle Linux · 8 olcnectl 0:1.4.10-1.el8

Vulnerabilities 1

  • High 7.5
    CVE-2022-39278

    Istio vulnerable to denial of service attack due to Golang Regex Library

    Istio is an open platform-independent service mesh that provides traffic management, policy enforcement, and telemetry collection. Prior to versions 1.15.2, 1.14.5, and 1.13.9, the Istio control plane, istiod, is vulnerable to a request processing error, allo…

    istio istio