Summary
kubernetes
[1.24.8-2]
- libct/cg: add misc controller to v1 drivers (upstream runc patch)
[1.24.8-1]
- Added Oracle specific build files for Kubernetes
olcne
[1.5.13-1]
- CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.24.15
- Added script to support upgrade from OL7 to OL8 using leapp
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kubeadm | 0:1.24.15-1.el7 |
| Oracle Linux · 7 | kubectl | 0:1.24.15-1.el7 |
| Oracle Linux · 7 | kubelet | 0:1.24.15-1.el7 |
| Oracle Linux · 7 | olcne-agent | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-api-server | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-gluster-chart | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-grafana-chart | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-istio-chart | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-metallb-chart | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-nginx | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-oci-ccm-chart | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-olm-chart | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-prometheus-chart | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcne-utils | 0:1.5.13-1.el7 |
| Oracle Linux · 7 | olcnectl | 0:1.5.13-1.el7 |
Vulnerabilities 2
-
Medium 6.5
Bypassing policies imposed by the ImagePolicyWebhook admission plugin
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
-
Medium 6.5CVE-2023-2728 Public exploit
Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin
Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the…