ELSA-2023-12354

ELSA-2023-12354 - istio security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-06-02

Description

istio
[1.16.4-1]
- Added Oracle specific files for 1.16.4-1

kubernetes
[1.25.7-2]
- libct/cg: add misc controller to v1 drivers (upstream runc patch)

olcne
[1.6.1-9]
- Updated the CVE ID's in Istio-1.16.4 changelog entry

[1.6.1-8]
- Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x

[1.6.1-7]
- Bugfix:Append a slash in oci-instance-metada query url

[1.6.1-6]
- Fixed helm installation in OLCNE upgrade

[1.6.1-5]
- Deprecate oci-private-key in favour of oci-private-key-file
- Updated olcne_version argument in olcnectl provision to support

[1.6.1-4]
- Update Istio version to 1.16.4 to address CVE's
- CVE-2023-27496
- CVE-2023-27488
- CVE-2023-27493
- CVE-2023-27492
- CVE-2023-27491
- CVE-2023-27487

[1.6.1-3]
- Resolved the issue to install multiple network cards using multus

[1.6.1-2]
- Update kubelet for upstream runc misc cgroups patch

[1.6.1-1]
- Fix the bug olcnectl provision fails if ol8_developer does not exist

Related CVEs

CVE-2023-27496

CVE-2023-27488

CVE-2023-27493

CVE-2023-27487

CVE-2023-27491

CVE-2023-27492

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (x86_64)	istio-1.16.4-1.el8.src.rpm	02499984ef3578c4b82e987b5f403ed3	-
	kubernetes-1.25.7-2.el8.src.rpm	30086b01d4c74ce2aad39aaac8fbd1ef	-
	olcne-1.6.1-9.el8.src.rpm	75351e7720775d6c45ef35a6a118eacd	-
	istio-1.16.4-1.el8.x86_64.rpm	aeb0a6629edfd362ac6c1ae3667e5623	-
	istio-istioctl-1.16.4-1.el8.x86_64.rpm	ff114fcfcf2e3e44669d4e09bd3f78a1	-
	kubeadm-1.25.7-2.el8.x86_64.rpm	ff86c4bd0556a5cc432b84ce8c1e87b6	-
	kubectl-1.25.7-2.el8.x86_64.rpm	f690935c841610c65159c4b11068d27b	-
	kubelet-1.25.7-2.el8.x86_64.rpm	bdb8ef3c7a5994bf115829ec845fc5de	-
	olcne-agent-1.6.1-9.el8.x86_64.rpm	44f81f0dfc8526276262d8ed675ca66e	-
	olcne-api-server-1.6.1-9.el8.x86_64.rpm	c4e9acde65a4fb89f6a591fb84dbf542	-
	olcne-calico-chart-1.6.1-9.el8.x86_64.rpm	1eaa068cf9219ad2d2dc151abf08589e	-
	olcne-gluster-chart-1.6.1-9.el8.x86_64.rpm	3e68c51b0c095d76edffb2c7609f4eb2	-
	olcne-grafana-chart-1.6.1-9.el8.x86_64.rpm	2280f7b3601027c106d72504ccf9d840	-
	olcne-istio-chart-1.6.1-9.el8.x86_64.rpm	5631d8572f8b894a289c7832f12f4b7d	-
	olcne-metallb-chart-1.6.1-9.el8.x86_64.rpm	383883be050395cc43693ea605742022	-
	olcne-multus-chart-1.6.1-9.el8.x86_64.rpm	74c11fc6fda8a7e3cbd10f55998622a3	-
	olcne-nginx-1.6.1-9.el8.x86_64.rpm	f8cf609380c48c9ec1546fdc9fe8151f	-
	olcne-oci-ccm-chart-1.6.1-9.el8.x86_64.rpm	2525aedf1f550eeb1e291615365cccb6	-
	olcne-olm-chart-1.6.1-9.el8.x86_64.rpm	f70529dcd88ee536f5572f6dfe4da7dd	-
	olcne-prometheus-chart-1.6.1-9.el8.x86_64.rpm	95c26194a14f7aee4be9a64291683b71	-
	olcne-utils-1.6.1-9.el8.x86_64.rpm	2e9fc6edad9ec2740dc6e499e3c68046	-
	olcnectl-1.6.1-9.el8.x86_64.rpm	f6c898f858d8fba56539716fc85283ab	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team