ELSA-2021-9526

ELSA-2021-9526 - olcne security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-11-09

Description

olcne
[1.3.2-2]
- Turn off default PodDisruptionBudget in istio template to unblock kubernetes module upgrade
- Update Kubernetes version to 1.20.11 to address CVE-2021-25741
- Update Istio to 1.9.8, 1.10.4 to address CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781
- Update proxyv2 image to select iptables legacy or latest based on host operating system
- Fix major.minor k8s version

istio
[1.9.8-3]
- Updated iptables-switch for OL8 and OL7 logic

[1.9.8-2]
- Bump release, addresses the following envoy CVEs,
CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781

[1.9.8-1]
- Added Oracle specific files for 1.9.8-1

istio
[1.10.4-3]
- Updated iptables-switch for OL8 and OL7 logic

[1.10.4-2]
- Bump release, addresses the following envoy CVEs,
CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781

[1.10.4-1]
- Added Oracle specific files for 1.10.4-1

kubernetes
[1.20.11-4]
- Fix major.minor version

[1.20.11-3]
- Updated iptables-switch for OL8 and OL7 logic

[1.20.11-2]
- Bump release for CVE fix, addresses CVE-2021-25741

[1.20.11-1]
- Added Oracle specific build files for Kubernetes

Related CVEs

CVE-2021-32781

CVE-2021-32777

CVE-2021-32779

CVE-2021-32778

CVE-2021-25741

CVE-2021-32780

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	istio-1.10.4-3.el7.src.rpm	eab5dfddbc83b2dfc571e9e6e8a4c08deb0af523f78cd9a2d231d9489c77bdf7	ELSA-2024-12329	ol7_x86_64_olcne13
	istio-1.9.8-3.el7.src.rpm	74337561dd4fa66d8cc7e5921ac92275a1853e68e539b8ed70fe3c0c760beadf	ELSA-2024-12329	ol7_x86_64_olcne12
	istio-1.9.8-3.el7.src.rpm	74337561dd4fa66d8cc7e5921ac92275a1853e68e539b8ed70fe3c0c760beadf	ELSA-2024-12329	ol7_x86_64_olcne13
	kubernetes-1.20.11-4.el7.src.rpm	8571b9b5ba24bd03b7bfad6bf866e19c0687a92ec6f47cb97d832132d669435a	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-1.3.2-2.el7.src.rpm	e6ca82e1ce37e34f3b29fd8a67e4246aeb685fc176e1fee6efd8e80b49ab9dcc	ELSA-2024-12329	ol7_x86_64_olcne13
	istio-1.10.4-3.el7.x86_64.rpm	bcd9ebb3bf083ed3365593fc9a671ede20f30f175dc03c9a95f7e4f074752892	ELSA-2024-12329	ol7_x86_64_olcne13
	istio-1.9.8-3.el7.x86_64.rpm	0a19cd655ec8e9ad66937f1a04e2170ea54c16be926da474a8bd9600870abcc1	ELSA-2024-12329	ol7_x86_64_olcne12
	istio-1.9.8-3.el7.x86_64.rpm	0a19cd655ec8e9ad66937f1a04e2170ea54c16be926da474a8bd9600870abcc1	ELSA-2024-12329	ol7_x86_64_olcne13
	istio-istioctl-1.10.4-3.el7.x86_64.rpm	ca4d629510ab96a686d296c18cbffb21f8d74d714e1736126c1c8d9098313d24	ELSA-2024-12329	ol7_x86_64_olcne13
	istio-istioctl-1.9.8-3.el7.x86_64.rpm	9be2479dfa4fd5dd69ceae889395c56b14906444660aad04a1c6cf7521774d59	ELSA-2024-12329	ol7_x86_64_olcne12
	istio-istioctl-1.9.8-3.el7.x86_64.rpm	9be2479dfa4fd5dd69ceae889395c56b14906444660aad04a1c6cf7521774d59	ELSA-2024-12329	ol7_x86_64_olcne13
	kubeadm-1.20.11-4.el7.x86_64.rpm	eff54d8dd88083f6a600a001328544c49e41917779a1edda4cdb50c678626b68	ELSA-2024-12329	ol7_x86_64_olcne13
	kubectl-1.20.11-4.el7.x86_64.rpm	49c4aca14b0c0ab920c82ee17e4771d48599ca08b64ae3dbd85319e40c47f549	ELSA-2024-12329	ol7_x86_64_olcne13
	kubelet-1.20.11-4.el7.x86_64.rpm	af6733a984dc4976a836cd48a03662ccaf93ed91626ada326c360f1e7c557946	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-agent-1.3.2-2.el7.x86_64.rpm	31468f1c6540b8641962cafe1199f1f9325b2d4e8295f36f3d61cb029cfaf672	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-api-server-1.3.2-2.el7.x86_64.rpm	7ca93ae7cce9dcab70d665efcca65087b017d6e8de866a147b047df1212ad8c4	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-grafana-chart-1.3.2-2.el7.x86_64.rpm	e24f0445a480783e5d8e2f0a4a2596d9211adc72b9f538f8a8a125e87bc0a342	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-istio-chart-1.3.2-2.el7.x86_64.rpm	58ac150000560ac06261ce376e960a40502cb95a21358dc727a2b6011b8fdd9a	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-nginx-1.3.2-2.el7.x86_64.rpm	a5c4da297765f2262dc4b6c3c31f203a3a5d56d83cd52a6ff20882d50d2ef68d	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-olm-chart-1.3.2-2.el7.x86_64.rpm	9f427fcece21e4da708e51fb8687d6629da02314219a421f7c7ac4d210c92b25	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-prometheus-chart-1.3.2-2.el7.x86_64.rpm	2c358491ee5b9470469f0f5a838cea62ab51632b602ae5b12b260eafe906e672	ELSA-2024-12329	ol7_x86_64_olcne13
	olcne-utils-1.3.2-2.el7.x86_64.rpm	00db9533536e443117a2f729e45fb3ea889efbe69b6e4b754ccb38bc934c081f	ELSA-2024-12329	ol7_x86_64_olcne13
	olcnectl-1.3.2-2.el7.x86_64.rpm	0341c1c8e5f5e703cf2ed6e66109571de98248acba68f89031daea1ec6855c74	ELSA-2024-12329	ol7_x86_64_olcne13

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team