Summary
cri-o
[1.25.5-2]
- Address CVE-2024-24786
cri-tools
[1.25.0-4]
- Address CVE-2024-24786
etcd
[3.5.9-4]
- Address protobuf [CVE-2024-24786]
[3.5.9-3]
- Address CVE-2023-39326 by upgrading golang to version 1.20.12
istio
[1.16.7-4]
- Address protobuf [CVE-2024-24786]
- Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323, CVE-2024-23324, CVE-2024-23325, CVE-2024-23327
kubernetes
[1.25.16-2]
- Fixed CoreDNS version check
[1.25.16-1]
- Added Oracle specific build files for Kubernetes
olcne
[1.6.7-3]
- Fixed unable to deploy new module(s) using config file containing already existing modules
- Update Istio-1.16.7 to address CVE-2024-24786, CVE-2024-23322, CVE-2024-23323, CVE-2024-23324, CVE-2024-23325, CVE-2024-23327
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cri-o | 0:1.25.5-2.el8 |
| Oracle Linux · 8 | cri-tools | 0:1.25.0-4.el8 |
| Oracle Linux · 8 | etcd | 0:3.5.9-4.el8 |
| Oracle Linux · 8 | istio | 0:1.16.7-4.el8 |
| Oracle Linux · 8 | istio-istioctl | 0:1.16.7-4.el8 |
| Oracle Linux · 8 | kubeadm | 0:1.25.16-2.el8 |
| Oracle Linux · 8 | kubectl | 0:1.25.16-2.el8 |
| Oracle Linux · 8 | kubelet | 0:1.25.16-2.el8 |
| Oracle Linux · 8 | olcne-agent | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-api-server | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-calico-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-gluster-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-grafana-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-istio-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-metallb-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-multus-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-nginx | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-oci-ccm-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-olm-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-prometheus-chart | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcne-utils | 0:1.6.7-3.el8 |
| Oracle Linux · 8 | olcnectl | 0:1.6.7-3.el8 |
Vulnerabilities 2
-
High 7.5
Crash in proxy protocol when command type of LOCAL in Envoy
Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command ty…
-
High 7.5
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown opti…