Summary
cri-o
[1.26.4-2]
- Address CVE-2024-24786
cri-tools
[1.26.1-5]
- Address CVE-2024-24786
etcd
[3.5.10-3]
- Address protobuf [CVE-2024-24786]
[3.5.10-1]
- Added Oracle specific build files
istio
[1.17.8-3]
- Address protobuf [CVE-2024-24786]
- Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323, CVE-2024-23324, CVE-2024-23325, CVE-2024-23327
kubernetes
[1.26.15-1]
- Added Oracle specific build files for Kubernetes
olcne
[1.7.7-2]
- Fixed unable to deploy new module(s) using config file containing already existing modules
- Update Istio-1.17.8 to address CVE-2024-24786, CVE-2024-23322, CVE-2024-23323, CVE-2024-23324, CVE-2024-23325, CVE-2024-23327
- Update Kubernetes-1.26.15 and components to address CVE-2024-24786
Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cri-o | 0:1.26.4-2.el8 |
| Oracle Linux · 8 | cri-tools | 0:1.26.1-5.el8 |
| Oracle Linux · 8 | etcd | 0:3.5.10-3.el8 |
| Oracle Linux · 8 | istio | 0:1.17.8-3.el8 |
| Oracle Linux · 8 | istio-istioctl | 0:1.17.8-3.el8 |
| Oracle Linux · 8 | kubeadm | 0:1.26.15-1.el8 |
| Oracle Linux · 8 | kubectl | 0:1.26.15-1.el8 |
| Oracle Linux · 8 | kubelet | 0:1.26.15-1.el8 |
| Oracle Linux · 8 | olcne-agent | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-api-server | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-calico-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-gluster-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-grafana-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-istio-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-kubevirt-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-metallb-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-multus-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-nginx | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-oci-ccm-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-olm-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-prometheus-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-rook-chart | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcne-utils | 0:1.7.7-2.el8 |
| Oracle Linux · 8 | olcnectl | 0:1.7.7-2.el8 |
Vulnerabilities 2
-
High 7.5
Crash in proxy protocol when command type of LOCAL in Envoy
Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command ty…
-
High 7.5
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown opti…