ELSA-2023-12772

ELSA-2023-12772 - olcne security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-09-11

Description

istio
[1.17.5-1]
- Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944.

kubevirt
[0.58.0-3]
- Ensure that selinux build tags are set for all Go builds

olcne
[1.7.2-3]
- Mofify kubevirt image tag to use virt-operator tag instead of kubevirt-version

[1.7.2-2]
- Update kubevirt image versions fixing selinux=enforce not being supported

[1.7.2-1]
- Add Istio-1.17.5 and Istio-1.16.7 to address CVE's
- CVE-2023-35941
- CVE-2023-35942
- CVE-2023-35943
- CVE-2023-35944

[1.7.0-10]
- Remove worker-nodes enforcement from olcnectl provision

[1.7.0-9]
- Add resolutions for jenkins build failures

Related CVEs

CVE-2023-35942

CVE-2023-35941

CVE-2023-35943

CVE-2023-35944

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	istio-1.17.5-1.el8.src.rpm	b8708dabb2e10de05c4fc4f3536642ccec447c214d79e5210e8c850f5577ba3a	-	ol8_x86_64_olcne17
	kubevirt-0.58.0-3.el8.src.rpm	e5f3bf62e5aceab5994a04bb7f3b7d35dd5c3cd1ea41a24c456830a5c8b0b6d6	-	ol8_x86_64_olcne17
	olcne-1.7.2-3.el8.src.rpm	1813eb71c972e2de3cb268e7aa0cb487029f67be7ad82c6f17369bcad8e1b4dc	-	ol8_x86_64_olcne17
	istio-1.17.5-1.el8.x86_64.rpm	1d21a84f11300cf20e45b8790e5c534bc338b92420059f5c88a14b809e3b0a09	-	ol8_x86_64_olcne17
	istio-istioctl-1.17.5-1.el8.x86_64.rpm	9c4f63a0a21f68daff6244127236f1ba13f80bc904ec637c9bd8f0aff3591467	-	ol8_x86_64_olcne17
	olcne-agent-1.7.2-3.el8.x86_64.rpm	53a75f41dbd1f3d7b7ade23629f5906691414ac8b31fb2d1c82a43c769104fb2	-	ol8_x86_64_olcne17
	olcne-api-server-1.7.2-3.el8.x86_64.rpm	2edb65a745677639deaacc7887d4d7d45012d0edbdc66c720fabae4047340d7c	-	ol8_x86_64_olcne17
	olcne-calico-chart-1.7.2-3.el8.x86_64.rpm	f0667f85c6ebf06aa952e41cb4b9a8663ab62763a6f597cd49c57555e64e554c	-	ol8_x86_64_olcne17
	olcne-gluster-chart-1.7.2-3.el8.x86_64.rpm	b9e1b49941b96ffdf3c1c34c1649846f335b748a0c5635a9f8c6bddc18157234	-	ol8_x86_64_olcne17
	olcne-grafana-chart-1.7.2-3.el8.x86_64.rpm	96ee98c75814a6a08630e796cd063fe3c43c96ffa72d268a2de87c4026cf9ecd	-	ol8_x86_64_olcne17
	olcne-istio-chart-1.7.2-3.el8.x86_64.rpm	d1bf37cf2d808f415777071eb48278746e21b64f41becc512c827ef984e49085	-	ol8_x86_64_olcne17
	olcne-kubevirt-chart-1.7.2-3.el8.x86_64.rpm	ccb813ad76a214e73afb7b786a765965d708d9eac9a426005ea1518c9dfeda19	-	ol8_x86_64_olcne17
	olcne-metallb-chart-1.7.2-3.el8.x86_64.rpm	24c6b047f0b22958309167f63ab8eb691d4d00ea80457f5b7c29d225a8434aac	-	ol8_x86_64_olcne17
	olcne-multus-chart-1.7.2-3.el8.x86_64.rpm	12986aa0a538a85eda0a965ce3731dcf8d6fd34e1eaf49616907878f92f961a5	-	ol8_x86_64_olcne17
	olcne-nginx-1.7.2-3.el8.x86_64.rpm	77167ef97463e72690fbf03f40f1dd259b71216c701a29c218e80208319f12cf	-	ol8_x86_64_olcne17
	olcne-oci-ccm-chart-1.7.2-3.el8.x86_64.rpm	927ac50b591fed62b4aff0d7e0d00b0b15ce79d9bb7ce34ea211ca7eb77e4c7f	-	ol8_x86_64_olcne17
	olcne-olm-chart-1.7.2-3.el8.x86_64.rpm	c0833ae1dcbe9e72d278f649ff0aaa77ee847fa9fdf2e373036e04c14ba68037	-	ol8_x86_64_olcne17
	olcne-prometheus-chart-1.7.2-3.el8.x86_64.rpm	f51aea2416b6ae4bd68dadfff4db634678db63b658d56d7475baabc020222458	-	ol8_x86_64_olcne17
	olcne-rook-chart-1.7.2-3.el8.x86_64.rpm	badb57ae4ec250a5577d13178530d2c1e4719c8689f401b16bbfd957f45d3568	-	ol8_x86_64_olcne17
	olcne-utils-1.7.2-3.el8.x86_64.rpm	312facd830d35668c3c0e14e4031e0817b92730771b43f7eb7dd4d564fb4d088	-	ol8_x86_64_olcne17
	olcnectl-1.7.2-3.el8.x86_64.rpm	393e9e4129c462c7ce0a8d870a4a875f9b6b7d16c244e50c17cb5791a05871f2	-	ol8_x86_64_olcne17
	virtctl-0.58.0-3.el8.x86_64.rpm	4524910ab5ae84ab314821f9928dc88cb9d656b2e871ed518f65467dfcbae021	-	ol8_x86_64_olcne17

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team