ELSA-2023-12771

ELSA-2023-12771 - istio security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-09-06

Description

istio
[1.17.5-1]
- Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944.

kubevirt
[0.58.0-3]
- Ensure that selinux build tags are set for all Go builds

olcne
[1.7.2-2]
- Update kubevirt image versions fixing selinux=enforce not being supported

[1.7.2-1]
- Add Istio-1.17.5 and Istio-1.16.7 to address CVE's
- CVE-2023-35941
- CVE-2023-35942
- CVE-2023-35943
- CVE-2023-35944

[1.7.0-10]
- Remove worker-nodes enforcement from olcnectl provision

[1.7.0-9]
- Add resolutions for jenkins build failures

Related CVEs

CVE-2023-35943

CVE-2023-35944

CVE-2023-35941

CVE-2023-35942

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	istio-1.17.5-1.el9.src.rpm	d1c766b60d151190c519eb424cffd602	-	ol9_x86_64_olcne17
	kubevirt-0.58.0-3.el9.src.rpm	36de45d00d7cd610944a6258632e58de	-	ol9_x86_64_olcne17
	olcne-1.7.2-2.el9.src.rpm	e13c9807780a55dc00c441498af390ae	-	ol9_x86_64_olcne17
	istio-1.17.5-1.el9.x86_64.rpm	ef9ac0d5c76b27c7b5752b580a97e3c4	-	ol9_x86_64_olcne17
	istio-istioctl-1.17.5-1.el9.x86_64.rpm	85155862ed01ce0154276dd810b94a6f	-	ol9_x86_64_olcne17
	olcne-agent-1.7.2-2.el9.x86_64.rpm	bcf2737d93e716f75c4bb520041dd39b	-	ol9_x86_64_olcne17
	olcne-api-server-1.7.2-2.el9.x86_64.rpm	76593524b3f5dad39e559c6607f6da90	-	ol9_x86_64_olcne17
	olcne-calico-chart-1.7.2-2.el9.x86_64.rpm	930e3701ebbc0f40a9e39230b6bb7e80	-	ol9_x86_64_olcne17
	olcne-gluster-chart-1.7.2-2.el9.x86_64.rpm	9ab75aa4960c51888625d23c6bf9bf14	-	ol9_x86_64_olcne17
	olcne-grafana-chart-1.7.2-2.el9.x86_64.rpm	b2cea37d53eb03c211c6cb0dd7378744	-	ol9_x86_64_olcne17
	olcne-istio-chart-1.7.2-2.el9.x86_64.rpm	4c58b0f902ba598b554aa5dd6eb36ed5	-	ol9_x86_64_olcne17
	olcne-kubevirt-chart-1.7.2-2.el9.x86_64.rpm	3cfecbde2dbdb7cb5c3cd3accad467cb	-	ol9_x86_64_olcne17
	olcne-metallb-chart-1.7.2-2.el9.x86_64.rpm	330cb11a1f2963e2a43d1cd711a10b20	-	ol9_x86_64_olcne17
	olcne-multus-chart-1.7.2-2.el9.x86_64.rpm	f032cfd054e4ee7b8fb5d70bf23095ab	-	ol9_x86_64_olcne17
	olcne-nginx-1.7.2-2.el9.x86_64.rpm	3d487aa56197daac2b26280395b22cc9	-	ol9_x86_64_olcne17
	olcne-oci-ccm-chart-1.7.2-2.el9.x86_64.rpm	1a81aa6a6a0cafac5969fbcade0da8e5	-	ol9_x86_64_olcne17
	olcne-olm-chart-1.7.2-2.el9.x86_64.rpm	80805ef15d02ea313c33472dadbc595f	-	ol9_x86_64_olcne17
	olcne-prometheus-chart-1.7.2-2.el9.x86_64.rpm	f8f9e2ca60ecbeefeb63c93da7128a33	-	ol9_x86_64_olcne17
	olcne-rook-chart-1.7.2-2.el9.x86_64.rpm	7caefe31b29859202408c54a216de33a	-	ol9_x86_64_olcne17
	olcne-utils-1.7.2-2.el9.x86_64.rpm	5cc1c44959251d1bd80d9ef61991b0df	-	ol9_x86_64_olcne17
	olcnectl-1.7.2-2.el9.x86_64.rpm	4813526695b554792d3dc21df0b46d7b	-	ol9_x86_64_olcne17
	virtctl-0.58.0-3.el9.x86_64.rpm	9db6b73c4ab96464f0d4954ada33f34f	-	ol9_x86_64_olcne17

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team