ELSA-2023-12771

ELSA-2023-12771 - istio security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-09-06

Description

istio
[1.17.5-1]
- Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944.

kubevirt
[0.58.0-3]
- Ensure that selinux build tags are set for all Go builds

olcne
[1.7.2-2]
- Update kubevirt image versions fixing selinux=enforce not being supported

[1.7.2-1]
- Add Istio-1.17.5 and Istio-1.16.7 to address CVE's
- CVE-2023-35941
- CVE-2023-35942
- CVE-2023-35943
- CVE-2023-35944

[1.7.0-10]
- Remove worker-nodes enforcement from olcnectl provision

[1.7.0-9]
- Add resolutions for jenkins build failures

Related CVEs

CVE-2023-35943

CVE-2023-35944

CVE-2023-35941

CVE-2023-35942

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	istio-1.17.5-1.el9.src.rpm	19f6ab42fa61bf4a14eb1a19b9dd07f4fc471b7c360ad8df4f864a0cbdc54548	-	ol9_x86_64_olcne17
	kubevirt-0.58.0-3.el9.src.rpm	ce633231e4e44f937761e5dfda07273c7d8dd1dbbae47ee9093638fe8cd8ba43	-	ol9_x86_64_olcne17
	olcne-1.7.2-2.el9.src.rpm	e94b6515fdca766ef5e7a87fc9f95e40007fac7654528b44eb32859bf38f5444	-	ol9_x86_64_olcne17
	istio-1.17.5-1.el9.x86_64.rpm	ccac6a3eb94e00bd5e95129910893730cff4d0f5df37314d3be4f2aee82e610d	-	ol9_x86_64_olcne17
	istio-istioctl-1.17.5-1.el9.x86_64.rpm	07b533a8fe9043193456ca7aef64381ac6cfdc488450c37b2d187c3fc1222bfb	-	ol9_x86_64_olcne17
	olcne-agent-1.7.2-2.el9.x86_64.rpm	5d3c9728fe5b98e2e4a161978752864120a44e82fb1d775aeef09c034700b8bf	-	ol9_x86_64_olcne17
	olcne-api-server-1.7.2-2.el9.x86_64.rpm	c6714c2bca4e77d4ccaf7431137873f3d17be9cf240d2725bd1d48605e7c192e	-	ol9_x86_64_olcne17
	olcne-calico-chart-1.7.2-2.el9.x86_64.rpm	976f5b65130671b0ae202560785c2f673b661443fb70c0cacc22fa8049631114	-	ol9_x86_64_olcne17
	olcne-gluster-chart-1.7.2-2.el9.x86_64.rpm	bf476a097ffe807db2464d2d6acb9a4158b9dc0ad8701f1e58aa395a6c67d59d	-	ol9_x86_64_olcne17
	olcne-grafana-chart-1.7.2-2.el9.x86_64.rpm	ff9abdbfaa94b8d68fcd1c1301bdd994e867282590c196375403bdc08f8e1b84	-	ol9_x86_64_olcne17
	olcne-istio-chart-1.7.2-2.el9.x86_64.rpm	3e202c87bbe00ab4d04b7d0c97c8090ade7dd81528006af446323e2fe7875944	-	ol9_x86_64_olcne17
	olcne-kubevirt-chart-1.7.2-2.el9.x86_64.rpm	d13d45e1ca4d29d193f4616adea34171b1eabccd65da0a1c7a3c17a38a06aa89	-	ol9_x86_64_olcne17
	olcne-metallb-chart-1.7.2-2.el9.x86_64.rpm	85f193af806b720962f8642cdfff16f53064495db27494507f2cde325f0b5a66	-	ol9_x86_64_olcne17
	olcne-multus-chart-1.7.2-2.el9.x86_64.rpm	eda5f7c3f7db8d5193cc5e0dea50f0440f22a7b915eb5b2835bd0e4a11e87732	-	ol9_x86_64_olcne17
	olcne-nginx-1.7.2-2.el9.x86_64.rpm	f37824b5ce9dba824f0014df80b6ba5013471a4f240f283da0ca56a04bb23601	-	ol9_x86_64_olcne17
	olcne-oci-ccm-chart-1.7.2-2.el9.x86_64.rpm	d02c92fd1c63f79cea921c49d027db8f59000a76e5bdcdb34e9755850826049b	-	ol9_x86_64_olcne17
	olcne-olm-chart-1.7.2-2.el9.x86_64.rpm	9c99f55e7202138625313e686a5cceca704fade2db9a7502208b5fce7377b6df	-	ol9_x86_64_olcne17
	olcne-prometheus-chart-1.7.2-2.el9.x86_64.rpm	4a4606727069f5f9453d4da1ea707f23b857ea5c46cac4759c0518285214e641	-	ol9_x86_64_olcne17
	olcne-rook-chart-1.7.2-2.el9.x86_64.rpm	73071b5c80b45d0aaeb38c5571c6f2748611873677000c4c28a3fc95593aed3a	-	ol9_x86_64_olcne17
	olcne-utils-1.7.2-2.el9.x86_64.rpm	d1b84e917b113c62605c3e2a9cce6936b8a4ea4bc4b5457cc0dde8ec3db05310	-	ol9_x86_64_olcne17
	olcnectl-1.7.2-2.el9.x86_64.rpm	c9849374b7a06f1bc48866280d863cbc0beea79a561653e23ac2cbf30b679e77	-	ol9_x86_64_olcne17
	virtctl-0.58.0-3.el9.x86_64.rpm	94f130137f8f482bb3a3e6df48d08aa9aa54d0c44997bff55dc3aa19a80fdfb8	-	ol9_x86_64_olcne17

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team