ELSA-2023-12356

ELSA-2023-12356 - istio security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-06-02

Description

istio
[1.15.7-1]
- Added Oracle specific files for 1.15.7-1

kubernetes
[1.24.8-2]
- libct/cg: add misc controller to v1 drivers (upstream runc patch)

[1.24.8-1]
- Added Oracle specific build files for Kubernetes

olcne
[1.5.12-6]
- Updated the CVE ID's in Istio-1.15.7 changelog entry

[1.5.12-5]
- Bug fix - Append a slash in oci-instance-metada url

[1.5.12-4]
- Update Istio version to 1.15.7 to address CVE's
- CVE-2023-27496
- CVE-2023-27488
- CVE-2023-27493
- CVE-2023-27492
- CVE-2023-27491
- CVE-2023-27487

[1.5.12-3]
- Updated olcne_version argument in olcnectl provision to support

[1.5.12-2]
- Update kubelet for upstream runc misc cgroups patch

[1.5.12-1]
- Fix the bug olcnectl provision fails if ol8_developer does not exist

Related CVEs

CVE-2023-27491

CVE-2023-27492

CVE-2023-27488

CVE-2023-27487

CVE-2023-27493

CVE-2023-27496

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	istio-1.15.7-1.el8.src.rpm	a9fe5c227ef26ec01eca6c5590a408c79eeaa5d69d5a9d23414656250f0b6cc4	-	ol8_x86_64_olcne15
	kubernetes-1.24.8-2.el8.src.rpm	46200ce4d3be20060a76f89d3c264ea836ca7e3c5cb696de47492ff7b651b224	-	ol8_x86_64_olcne15
	olcne-1.5.12-6.el8.src.rpm	5ac5a70fd90fa85ff44a960586170783f1755f48ea3ce643abfe47e0c39d8794	-	ol8_x86_64_olcne15
	istio-1.15.7-1.el8.x86_64.rpm	4a7f3634f927e38c2833085926274d7b628ccfcd4298757f4217cf82e988ac22	-	ol8_x86_64_olcne15
	istio-istioctl-1.15.7-1.el8.x86_64.rpm	0c6e6ca37d2ec44a7124cfba2fb8416de8f07f138dbf5aa1905bca1db84a92ca	-	ol8_x86_64_olcne15
	kubeadm-1.24.8-2.el8.x86_64.rpm	560a15eba5af41982203b9368f2ff53ac0242c6995ad9b0c6746517a4d9f0169	-	ol8_x86_64_olcne15
	kubectl-1.24.8-2.el8.x86_64.rpm	c2b8f45d255cbf961b78d7578bbe2e3920e2b8aa62fed333c57d4e740a819b0c	-	ol8_x86_64_olcne15
	kubelet-1.24.8-2.el8.x86_64.rpm	45636be1c5baf7e17ff72855abc999965bb16bda16be3bff4f205e77a74bc069	-	ol8_x86_64_olcne15
	olcne-agent-1.5.12-6.el8.x86_64.rpm	fe2b4b6ff0dbd3a8b57175ba9e1a6391d70923539202f6689734f88655a557bc	-	ol8_x86_64_olcne15
	olcne-api-server-1.5.12-6.el8.x86_64.rpm	2965315eec7cd406e4f6cf3cf52c6b37616416d690ca67f8e9e95c42c47b6810	-	ol8_x86_64_olcne15
	olcne-gluster-chart-1.5.12-6.el8.x86_64.rpm	cae865ab9f90b96be0a332a23a72d18ae276a58cc55e180c00185a9d26233008	-	ol8_x86_64_olcne15
	olcne-grafana-chart-1.5.12-6.el8.x86_64.rpm	0e4372282173140b0cc8c68048e32e4b1a3cc9442a80880f634bfb7cad61af55	-	ol8_x86_64_olcne15
	olcne-istio-chart-1.5.12-6.el8.x86_64.rpm	e25d26d6f9ab5f35305a0a886f5d078483fa5c68c9d32ee07e85ed66121cea06	-	ol8_x86_64_olcne15
	olcne-metallb-chart-1.5.12-6.el8.x86_64.rpm	36e05cd925fee6cf1111754e1e2d5fa6c4ef304b87affb07560723536fe7126a	-	ol8_x86_64_olcne15
	olcne-nginx-1.5.12-6.el8.x86_64.rpm	b0963fac88e9b53d25f62eef2a58cc6bfb49efe8459e528c57ef09fe2d614770	-	ol8_x86_64_olcne15
	olcne-oci-ccm-chart-1.5.12-6.el8.x86_64.rpm	0862c8ca7a7d2cbb5890274483c09622fcdf0061044356bc97002aee1cd18d50	-	ol8_x86_64_olcne15
	olcne-olm-chart-1.5.12-6.el8.x86_64.rpm	74d42871d914183016af8b80dd7f5843ff57ce03421367000e82167121fbaa71	-	ol8_x86_64_olcne15
	olcne-prometheus-chart-1.5.12-6.el8.x86_64.rpm	7a834663648b47c79e88acddf8684f4601a7008a8ff83410cd3278f3a8ac01d8	-	ol8_x86_64_olcne15
	olcne-utils-1.5.12-6.el8.x86_64.rpm	7572ccecda9817b10aba265f70c8bc457db171d6e40f4b2027d2d4b7fd3f66fa	-	ol8_x86_64_olcne15
	olcnectl-1.5.12-6.el8.x86_64.rpm	d80d933ae45690c454f18438ad882df2187ec258819f70b96d4ce29e3ac06e74	-	ol8_x86_64_olcne15

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team