Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2021-9399

Опубликовано: 06 авг. 2021
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2021-9399: olcne security update (IMPORTANT)

olcne [1.3.1-5]

  • Updated registry-image-helper.sh to work with olcne-utils

[1.3.1-4]

  • Fix istio template for 1.9.6 and 1.10.2 for k8s update failure

[1.3.1-3]

  • Added END_VERSION_BLOCK for OLM image

[1.3.1-2]

  • Fix iptables issue when running on OL7 host using OL8 image for 1.19.8
  • Fix iptables issue when running on OL7 host using OL8 image
  • Address Istio CVE's CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824
  • Fixed yaml file to stop olcne-nginx and keepalived services at uninstall [Orabug: 32296282]
  • Fixed missing double semicolon in registry image helper

kubernetes [1.20.6-2]

  • Fix iptables OL7 host kernel issue when running with OL8 image

[1.20.6-1]

  • Added Oracle specific build files for Kubernetes

kubernetes [1.19.8-3]

  • Fix iptables issue when running on OL7 host with OL8 image

istio [1.9.6-2]

  • Fix iptables issue when running on OL7 host using OL8 image
  • Added istio-mixs and istio-mixc to Obsoletes list

[1.9.6-1]

  • Address CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824

istio [1.10.2-2]

  • Fix iptables problem when running on OL7 host using OL8 image

[1.10.2-1]

  • Address CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

istio

1.10.2-2.el7

istio

1.9.6-2.el7

istio-istioctl

1.10.2-2.el7

istio-istioctl

1.9.6-2.el7

kubeadm

1.19.8-3.el7

kubeadm

1.20.6-2.el7

kubectl

1.19.8-3.el7

kubectl

1.20.6-2.el7

kubelet

1.19.8-3.el7

kubelet

1.20.6-2.el7

olcne-agent

1.3.1-5.el7

olcne-api-server

1.3.1-5.el7

olcne-grafana-chart

1.3.1-5.el7

olcne-istio-chart

1.3.1-5.el7

olcne-nginx

1.3.1-5.el7

olcne-olm-chart

1.3.1-5.el7

olcne-prometheus-chart

1.3.1-5.el7

olcne-utils

1.3.1-5.el7

olcnectl

1.3.1-5.el7

Связанные уязвимости

oracle-oval
больше 4 лет назад

ELSA-2021-9398: olcne security update (IMPORTANT)

oracle-oval
больше 4 лет назад

ELSA-2021-9397: olcne security update (IMPORTANT)

oracle-oval
больше 4 лет назад

ELSA-2021-9396: olcne security update (IMPORTANT)

CVSS3: 7.5
redhat
почти 5 лет назад

An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.

CVSS3: 7.5
nvd
больше 4 лет назад

An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.