Summary
conmon
[2.1.3-8]
- address CVE-2023-39326
cri-o
[1.25.5-1]
- Added Oracle Specifile Files for cri-o
cri-tools
[1.25.0-3]
- Resolve CVE-2023-39326
flannel-cni-plugin
[1.0.1-4]
- Resolve CVE-2023-39326
helm
[3.11.1-3]
- address CVE-2023-39326
istio
[1.16.7-3]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata
[1.12.1-17]
- Include OL9 for kernel-uek-container (currently in UEKR7_developer_preview)
kata-agent
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-image
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-ksm-throttler
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-proxy
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-runtime
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kata-shim
[1.12.1-11]
- Rebuild with -11 tag
[1.12.1-10]
- Updated Golang to 1.20.12 to address CVE CVE-2023-39326
kubernetes
[1.25.15-2]
- Address CVE-2023-39326 by upgrading golang to 1.20.12
kubernetes-cni
[1.0.1-4]
- address CVE-2023-39326
kubernetes-cni-plugins
[1.0.1-5]
- address CVE-2023-39326
olcne
[1.6.6-3]
- Fixed pod-network:calico update
yq
[4.34.1-4]
- Update Golang to 1.20.12 to address CVE-2023-39326
Fixed packages 34
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | conmon | 3:2.1.3-8.el8 |
| Oracle Linux · 8 | cri-o | 0:1.25.5-1.el8 |
| Oracle Linux · 8 | cri-tools | 0:1.25.0-3.el8 |
| Oracle Linux · 8 | flannel-cni-plugin | 0:1.0.1-4.el8 |
| Oracle Linux · 8 | helm | 0:3.11.1-3.el8 |
| Oracle Linux · 8 | istio | 0:1.16.7-3.el8 |
| Oracle Linux · 8 | istio-istioctl | 0:1.16.7-3.el8 |
| Oracle Linux · 8 | kata | 0:1.12.1-17.el8 |
| Oracle Linux · 8 | kata-agent | 0:1.12.1-11.el8 |
| Oracle Linux · 8 | kata-image | 0:1.12.1-11.11.ol8_202312212317 |
| Oracle Linux · 8 | kata-ksm-throttler | 0:1.12.1-11.el8 |
| Oracle Linux · 8 | kata-proxy | 0:1.12.1-11.el8 |
| Oracle Linux · 8 | kata-runtime | 0:1.12.1-11.el8 |
| Oracle Linux · 8 | kata-shim | 0:1.12.1-11.el8 |
| Oracle Linux · 8 | kubeadm | 0:1.25.15-2.el8 |
| Oracle Linux · 8 | kubectl | 0:1.25.15-2.el8 |
| Oracle Linux · 8 | kubelet | 0:1.25.15-2.el8 |
| Oracle Linux · 8 | kubernetes-cni | 0:1.0.1-4.el8 |
| Oracle Linux · 8 | kubernetes-cni-plugins | 0:1.0.1-5.el8 |
| Oracle Linux · 8 | olcne-agent | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-api-server | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-calico-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-gluster-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-grafana-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-istio-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-metallb-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-multus-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-nginx | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-oci-ccm-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-olm-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-prometheus-chart | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcne-utils | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | olcnectl | 0:1.6.6-3.el8 |
| Oracle Linux · 8 | yq | 0:4.34.1-4.el8 |
Vulnerabilities 1
-
Unscored —
Denial of service via chunk extensions in net/http
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically rea…