ELSA-2020-5726

ELSA-2020-5726 - grafana kubernetes-cni kubernetes-cni-plugins kubernetes kubernetes olcne security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-06-12

Description

grafana
[%{}-1.0.1]
- Added Oracle Specific Build Files for grafana

kubernetes-cni
[0.7.1-1.0.1]
- Added Oracle specific build files for Kubernetes CNI

kubernetes-cni-plugins
[0.8.6-1.0.1]
- Added Oracle specific build files for Kubernetes CNI Plugins

kubernetes
[1.14.9-1.0.4]
- CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
- CVE-2020-8555: Half-Blind SSRF in kube-controller-manager

[1.14.9-1.0.3]
- [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads

[1.14.9-1.0.2]
- Use bounded crio version

[1.14.9-1.0.1]
- Added Oracle specific build files for Kubernetes

kubernetes
[1.17.6-1.0.2.el7]
- Update to kubernetes-cni for CVE-2020-10749

[1.17.6-1.0.2.el7]
- Added Oracle specific build files for Kubernetes

olcne
[1.1.1-1]
- Update Istio to use Grafana 6.7.4 to address CVE-2020-13379
- Kubernetes update due to CVE-2020-10749 and CVE-2020-8555

Related CVEs

CVE-2020-13379

CVE-2020-8555

CVE-2020-10749

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	grafana-6.7.4-1.0.1.el7.src.rpm	d6868122e181ee19b6f3e13a93aad57ffa7da4f4fedb19c8cae4f68e9f752b62	ELBA-2020-5955	ol7_x86_64_olcne11
	kubernetes-1.14.9-1.0.4.el7.src.rpm	a903088a64f468668d14aece8a0dceb6410238c2ce098e3b885f1d1c3cc24daf	ELSA-2024-12329	ol7_x86_64_olcne
	kubernetes-1.14.9-1.0.4.el7.src.rpm	a903088a64f468668d14aece8a0dceb6410238c2ce098e3b885f1d1c3cc24daf	ELSA-2024-12329	ol7_x86_64_olcne11
	kubernetes-1.17.6-1.0.2.el7.src.rpm	849c8dc8784d264b009e551c93df3198c3b5773642141099de3f17b7aa1187d8	ELSA-2024-12329	ol7_x86_64_olcne11
	kubernetes-cni-0.7.1-1.0.1.el7.src.rpm	8e41b9d438e1d6b349f260929080cb645e74f2e613a2d0418ae8587b97781a5f	ELSA-2024-12189	ol7_x86_64_addons
	kubernetes-cni-0.7.1-1.0.1.el7.src.rpm	8e41b9d438e1d6b349f260929080cb645e74f2e613a2d0418ae8587b97781a5f	ELSA-2024-12189	ol7_x86_64_olcne
	kubernetes-cni-0.7.1-1.0.1.el7.src.rpm	8e41b9d438e1d6b349f260929080cb645e74f2e613a2d0418ae8587b97781a5f	ELSA-2024-12189	ol7_x86_64_olcne11
	kubernetes-cni-plugins-0.8.6-1.0.2.el7.src.rpm	3c6b66423acba1dcaf5a267b0de7a0504ed3823b79f559f5af7aef79763a8250	ELBA-2024-18618	ol7_x86_64_addons
	kubernetes-cni-plugins-0.8.6-1.0.2.el7.src.rpm	3c6b66423acba1dcaf5a267b0de7a0504ed3823b79f559f5af7aef79763a8250	ELBA-2024-18618	ol7_x86_64_olcne
	kubernetes-cni-plugins-0.8.6-1.0.2.el7.src.rpm	3c6b66423acba1dcaf5a267b0de7a0504ed3823b79f559f5af7aef79763a8250	ELBA-2024-18618	ol7_x86_64_olcne11
	olcne-1.1.1-3.el7.src.rpm	06e2da57e8a589e75c8bee687b1499e0c121cc8ac882a39064fef033ceab4222	ELSA-2024-12329	ol7_x86_64_olcne11
	grafana-6.7.4-1.0.1.el7.x86_64.rpm	92d0046cbed45fac260caea13590d4a1b345759277a029b64ea06eaf081bb778	ELBA-2020-5955	ol7_x86_64_olcne11
	kubeadm-1.14.9-1.0.4.el7.x86_64.rpm	78050b45c8fb58c1fb56b01e9c54624da7c288a1833866a81b275658c9dc95f6	ELSA-2024-12329	ol7_x86_64_olcne
	kubeadm-1.14.9-1.0.4.el7.x86_64.rpm	78050b45c8fb58c1fb56b01e9c54624da7c288a1833866a81b275658c9dc95f6	ELSA-2024-12329	ol7_x86_64_olcne11
	kubeadm-1.17.6-1.0.2.el7.x86_64.rpm	80d9d3c78737eb068c7da1197a2aed2a073a67fc4f476450d21de172cc404c9d	ELSA-2024-12329	ol7_x86_64_olcne11
	kubectl-1.14.9-1.0.4.el7.x86_64.rpm	55a0e976205e57733ac18f80e1ffa2f6a6928fbf92f6fe038e561eafaaf0f4bd	ELSA-2024-12329	ol7_x86_64_olcne
	kubectl-1.14.9-1.0.4.el7.x86_64.rpm	55a0e976205e57733ac18f80e1ffa2f6a6928fbf92f6fe038e561eafaaf0f4bd	ELSA-2024-12329	ol7_x86_64_olcne11
	kubectl-1.17.6-1.0.2.el7.x86_64.rpm	c7a2d8289f913de8f55918a7f9e3a4fb557659b57332df37482e502502342d12	ELSA-2024-12329	ol7_x86_64_olcne11
	kubelet-1.14.9-1.0.4.el7.x86_64.rpm	aa3452da8b3fcdf9ebff95073c8f0a2ac4ef5ed0b98dc08a65cbf651b1fd9839	ELSA-2024-12329	ol7_x86_64_olcne
	kubelet-1.14.9-1.0.4.el7.x86_64.rpm	aa3452da8b3fcdf9ebff95073c8f0a2ac4ef5ed0b98dc08a65cbf651b1fd9839	ELSA-2024-12329	ol7_x86_64_olcne11
	kubelet-1.17.6-1.0.2.el7.x86_64.rpm	70a0c3e8e1ea5e2e7480ff933e6eb587959cc637d188cfdf37c75f1ffa486c2b	ELSA-2024-12329	ol7_x86_64_olcne11
	kubernetes-cni-0.7.1-1.0.1.el7.x86_64.rpm	88ca99d88ba3b06434d26c0ba0aadc7b67834460b1845f15ae940f2e48b2ffa1	ELSA-2024-12189	ol7_x86_64_addons
	kubernetes-cni-0.7.1-1.0.1.el7.x86_64.rpm	88ca99d88ba3b06434d26c0ba0aadc7b67834460b1845f15ae940f2e48b2ffa1	ELSA-2024-12189	ol7_x86_64_olcne
	kubernetes-cni-0.7.1-1.0.1.el7.x86_64.rpm	88ca99d88ba3b06434d26c0ba0aadc7b67834460b1845f15ae940f2e48b2ffa1	ELSA-2024-12189	ol7_x86_64_olcne11
	kubernetes-cni-plugins-0.8.6-1.0.2.el7.x86_64.rpm	8150e188a6a008b4d8c4aa29693ba5b76edef406416ad55255872f977f044f3e	ELBA-2024-18618	ol7_x86_64_addons
	kubernetes-cni-plugins-0.8.6-1.0.2.el7.x86_64.rpm	8150e188a6a008b4d8c4aa29693ba5b76edef406416ad55255872f977f044f3e	ELBA-2024-18618	ol7_x86_64_olcne
	kubernetes-cni-plugins-0.8.6-1.0.2.el7.x86_64.rpm	8150e188a6a008b4d8c4aa29693ba5b76edef406416ad55255872f977f044f3e	ELBA-2024-18618	ol7_x86_64_olcne11
	olcne-agent-1.1.1-3.el7.x86_64.rpm	f2e87f010fe92fe4da2d9a8987d0b121facc6ab1a69d9d9f22346128bc41e837	ELSA-2024-12329	ol7_x86_64_olcne11
	olcne-api-server-1.1.1-3.el7.x86_64.rpm	418447c81499b01f77dd32d3e1a83dae88643b9a4bd10bbf863b3fa1773474ce	ELSA-2024-12329	ol7_x86_64_olcne11
	olcne-istio-chart-1.1.1-3.el7.x86_64.rpm	e99cff4bea919e075863e5f6ba43d838bacd96ecfaf401a0706ab9643fe59655	ELSA-2024-12329	ol7_x86_64_olcne11
	olcne-nginx-1.1.1-3.el7.x86_64.rpm	544e96a903ef37505a70bad4a1944f148b4b3172c225a9e696a04fe22da3b167	ELSA-2024-12329	ol7_x86_64_olcne11
	olcne-prometheus-chart-1.1.1-3.el7.x86_64.rpm	372adce9786f02a7a7230122f3e269c9a76b6429c9be2ac35ac848f6fe6e94f0	ELSA-2024-12329	ol7_x86_64_olcne11
	olcne-utils-1.1.1-3.el7.x86_64.rpm	ee5f1c8761761b739b720721d41daa33203c71037536c1ab6d2b1fabaa1f149b	ELSA-2024-12329	ol7_x86_64_olcne11
	olcnectl-1.1.1-3.el7.x86_64.rpm	b190eeb17facca8d896671bbb414edc8eaea3b627f990f1608fdfc350a886a2c	ELSA-2024-12329	ol7_x86_64_olcne11

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team