Summary
conmon
[2.1.3-8]
- address CVE-2023-39326
[2.1.3-7]
- Resolve CVE-2023-39325
[2.1.3-6]
- Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile
[2.1.3-5]
- Add systemd-devel as build requirement
[2.1.3-4]
- Add support ARM build
[2.1.3.3]
- Add OL9 support
[2.1.3.2]
- Update inline with Linux team building conmon for all but OL7.
[2.1.3-1]
- Added build scripts
cri-o
[1.25.5-1]
- Added Oracle Specifile Files for cri-o
cri-tools
[1.25.0-3]
- Resolve CVE-2023-39326
[1.25.0-2]
- Resolve CVE-2023-39325
[1.25.0-1]
- Added Oracle Specific Build Files for cri-tools
flannel-cni-plugin
[1.0.1-4]
- Resolve CVE-2023-39326
[1.0.1-3]
- Resolve CVE-2023-44487 and CVE-2023-39325
[1.0.1-2]
- Add support for Oracle Linux 9
[1.0.1-1]
- Added Oracle specific build files for Flannel CNI Plugins
helm
[3.11.1-3]
- address CVE-2023-39326
[3.11.1-2]
- address CVE-2023-44487 and CVE-2023-39325
[3.11.1-1]
- Added Oracle Specific build Files
istio
[1.16.7-3]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
[1.16.7-1]
- Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944.
kata
[1.12.1-17]
- Include OL9 for kernel-uek-container (currently in UEKR7_developer_preview)
[1.12.1-16]
- Rebuild with golang 1.20.12
[1.12.1-15]
- Updated for kubernetes 1.27 and 1.28
[1.12.1-14]
- Updated to address CVE-2023-44487 and CVE-2023-39325
[1.12.1-13]
- Rebuild kata to fix timestamp issue
[1.12.1-12]
- Add support for ARM build
[1.12.1-11]
- Add OL9 support
[1.12.1-10]
- Updated kata-runtime version to work with more versions of kvm_utils
[1.21.1-9]
- updated cri-o and cri-tools versions to support olcne-1.6.0
[1.12.1-7]
- Updated kernel_uek_max and kernel_uek_container_max to 5.16 to support UEKR7 host and guest kernel.
Note: installed kernel < 5.16.
[1.12.1-6]
- updated cri-o and cri-tools versions to support olcne-1.5.0
[1.12.1-5]
- updated cri-o and cri-tools versions to support kubernetes-1.23
[1.12.1-4]
- update kata-image versions
- update kernel-uek-container version to kernel-uek-container-5.4.17-2136.306.1.3
[1.21.1-3]
- Support k8s 1.21.6
- updated kernel-uek-container version
- updated kata-image versions
- added buildhost variable
[1.12.1-2]
- Golang 1.15.9
[1.12.1-1]
- Updated to kata 1.12.1
- Updated guest kernel (kernel-uek-container) minimum version to UEK6U2 (5.4.17-2102.200.7)
kata-agent
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325
[1.12.1-8]
- Remove build_date global variable in kata-image specfile
[1.12.1-7]
- Add support for ARM build
[1.12.1-6]
- Add OL9 support
[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper
[1.12.1-3]
- updated golang version
- added buildhost variable
[1.12.1-2]
- Golang 1.15.9
[1.12.1-1]
- Added Oracle Specific Build Files for kata-agent
kata-image
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325
[1.12.1-8]
- Remove build_date global variable in specfile
[1.12.1-7]
- Add support for ARM build
[1.12.1-6]
- Restore OL7 and bump release
[1.12.1-5]
- Add support for Oracle Linux 9
[1.12.1-4]
- build for kata-agent-1.12.1-4
[1.12.1-3]
- updated golang version
- added buildhost variable
[1.12.1-2]
- Golang 1.15.9
[1.12.1-1]
- Added Oracle Specific Build Files for kata-image
kata-ksm-throttler
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325
[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue
[1.12.1-7]
- Add support for ARM build
[1.12.1-6]
- Bump releaase inline with others for reversion of removal of OL7.
[1.12.1-5]
- Add support for Oracle Linux 9
[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper
[1.12.1-3]
- updated golang version
- added buildhost variable
[1.12.1-2]
- Golang 1.15.9
[1.12.1-1]
- Added Oracle Specific Build Files for kata-ksm-throttler
kata-proxy
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325
[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue
[1.12.1-7]
- Add support for ARM build
[1.12.1-6]
- Revert OL7 removal
[1.12.1-5]
- Add support for Oracle Linux 9
[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper
[1.12.1-3]
- updated golang version
- added buildhost variable
[1.12.1-2]
- Golang 1.15.9
[1.12.1-1]
- Added Oracle Specific Build Files for kata-proxy
kata-runtime
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325
[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue
[1.12.1-7]
- Add support for ARM build
[1.12.1-6]
- Add OL9 support
[1.12.1-5]
- Updated qemu-kvm machine options to work with more versions of kvm_utils
[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls attribution-helper
[1.12.1-3]
- updated golang version
- added buildhost variable
[1.12.1-2]
- Golang 1.15.9
[1.12.1-1]
- Added Oracle Specific Files For kata-runtime
kata-shim
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
[1.12.1-9]
- Updated to address CVE-2023-44487 and CVE-2023-39325
[1.12.1-8]
- Bump release inline with other kata packages for fixing timestamp issue
[1.12.1-7]
- Add support for ARM build
[1.12.1-6]
- Bump releaase inline with others for reversion of removal of OL7.
[1.12.1-5]
- Add support for Oracle Linux 9
[1.12.1-4]
- Updated THIRD_PARTY_LICENSES.txt generated using pls a
Fixed packages 34
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | conmon | 3:2.1.3-8.el7 |
| Oracle Linux · 7 | cri-o | 0:1.25.5-1.el7 |
| Oracle Linux · 7 | cri-tools | 0:1.25.0-3.el7 |
| Oracle Linux · 7 | flannel-cni-plugin | 0:1.0.1-4.el7 |
| Oracle Linux · 7 | helm | 0:3.11.1-3.el7 |
| Oracle Linux · 7 | istio | 0:1.16.7-3.el7 |
| Oracle Linux · 7 | istio-istioctl | 0:1.16.7-3.el7 |
| Oracle Linux · 7 | kata | 0:1.12.1-17.el7 |
| Oracle Linux · 7 | kata-agent | 0:1.12.1-11.el7 |
| Oracle Linux · 7 | kata-image | 0:1.12.1-11.11.ol7_202312212315 |
| Oracle Linux · 7 | kata-ksm-throttler | 0:1.12.1-11.el7 |
| Oracle Linux · 7 | kata-proxy | 0:1.12.1-11.el7 |
| Oracle Linux · 7 | kata-runtime | 0:1.12.1-11.el7 |
| Oracle Linux · 7 | kata-shim | 0:1.12.1-11.el7 |
| Oracle Linux · 7 | kubeadm | 0:1.25.15-2.el7 |
| Oracle Linux · 7 | kubectl | 0:1.25.15-2.el7 |
| Oracle Linux · 7 | kubelet | 0:1.25.15-2.el7 |
| Oracle Linux · 7 | kubernetes-cni | 0:1.0.1-4.el7 |
| Oracle Linux · 7 | kubernetes-cni-plugins | 0:1.0.1-5.el7 |
| Oracle Linux · 7 | olcne-agent | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-api-server | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-calico-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-gluster-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-grafana-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-istio-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-metallb-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-multus-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-nginx | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-oci-ccm-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-olm-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-prometheus-chart | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcne-utils | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | olcnectl | 0:1.6.6-3.el7 |
| Oracle Linux · 7 | yq | 0:4.34.1-4.el7 |
Vulnerabilities 1
-
Unscored —
Denial of service via chunk extensions in net/http
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically rea…