ELSA-2021-9525

ELSA-2021-9525 - olcne security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-11-10

Description

olcne
[1.2.5-2]
- Update Istio to 1.9.8 to address CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781
- Update proxyv2 image to select iptables legacy or latest based on host operating system
- Turn off Istio PodDisruptionBudget

istio
[1.9.8-3]
- Updated iptables-switch for OL8 and OL7 logic

[1.9.8-2]
- Bump release, addresses the following envoy CVEs,
CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781

[1.9.8-1]
- Added Oracle specific files for 1.9.8-1

Related CVEs

CVE-2021-32777

CVE-2021-32780

CVE-2021-32781

CVE-2021-32779

CVE-2021-32778

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	istio-1.9.8-3.el7.src.rpm	ccf1aa8fec3e9fcfe7520e55bfb1b38d	-
	olcne-1.2.5-2.el7.src.rpm	9da61d6b1c2f90611691fd5f54181f01	-
	istio-1.9.8-3.el7.x86_64.rpm	9df0c3313bf806e7d9eec31b2872a981	-
	istio-istioctl-1.9.8-3.el7.x86_64.rpm	17ad617cbd0ead21a49538f0e56e5f33	-
	olcne-agent-1.2.5-2.el7.x86_64.rpm	7f569a2bf5bf4c9a76eebeeb02041d72	-
	olcne-api-server-1.2.5-2.el7.x86_64.rpm	67696fc39104de449494024225eaa03f	-
	olcne-istio-chart-1.2.5-2.el7.x86_64.rpm	7a32b635b020574bc4c32b46a6e3bc6f	-
	olcne-nginx-1.2.5-2.el7.x86_64.rpm	544d047318946318433d99eabf38ee67	-
	olcne-prometheus-chart-1.2.5-2.el7.x86_64.rpm	9fb3dd0da17a6f8289ff27317d7aa675	-
	olcne-utils-1.2.5-2.el7.x86_64.rpm	994b89a716b6746083edaed015ac1dd8	-
	olcnectl-1.2.5-2.el7.x86_64.rpm	6f74565ddecc7f86fe40c96961c21513	-
Oracle Linux 8 (x86_64)	istio-1.9.8-3.el8.src.rpm	998ca986a4aa85962249d218f3b87653	-
	olcne-1.2.5-2.el8.src.rpm	3eed1173e6f8f7aed073cc2a5cb3fe43	-
	istio-1.9.8-3.el8.x86_64.rpm	f5748366c6ff16408d75e9cfb7326ecf	-
	istio-istioctl-1.9.8-3.el8.x86_64.rpm	110c1e9f2e971e0a0b5e4190a370ea19	-
	istio-pilot-agent-1.9.8-3.el8.x86_64.rpm	462a51c9b1cdcddbc8dc69b12c486de9	-
	istio-pilot-discovery-1.9.8-3.el8.x86_64.rpm	79ce51297d0bbc1ff8b13fd544978783	-
	olcne-agent-1.2.5-2.el8.x86_64.rpm	510ebacbfbb8dc8cc47c91e193b66c55	-
	olcne-api-server-1.2.5-2.el8.x86_64.rpm	5df8ff2dcd7d2636b4b06710965128f2	-
	olcne-istio-chart-1.2.5-2.el8.x86_64.rpm	c62e39dc3a8e1f55f73f8c494d4a22d8	-
	olcne-nginx-1.2.5-2.el8.x86_64.rpm	19e99779e549622081aeea7e64044846	-
	olcne-prometheus-chart-1.2.5-2.el8.x86_64.rpm	59dd1f2bfb1c499a2635e2a79d6c5208	-
	olcne-utils-1.2.5-2.el8.x86_64.rpm	8e8fd32d3a4d46d937f14220381a31ee	-
	olcnectl-1.2.5-2.el8.x86_64.rpm	bed62d2ab950eff649e0385fcd80c28d	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team