Oracle Linux Cloud Native Environment Security Advisory ELSA-2022-9363

http://linux.oracle.com/errata/ELSA-2022-9363.html

The following updated rpms for Oracle Linux Cloud Native Environment 1.3 have been uploaded to the Unbreakable Linux Network:

x86_64:
olcnectl-1.3.5-1.el8.x86_64.rpm
olcne-agent-1.3.5-1.el8.x86_64.rpm
olcne-api-server-1.3.5-1.el8.x86_64.rpm
olcne-utils-1.3.5-1.el8.x86_64.rpm
olcne-nginx-1.3.5-1.el8.x86_64.rpm
olcne-prometheus-chart-1.3.5-1.el8.x86_64.rpm
olcne-grafana-chart-1.3.5-1.el8.x86_64.rpm
olcne-istio-chart-1.3.5-1.el8.x86_64.rpm
olcne-olm-chart-1.3.5-1.el8.x86_64.rpm
istio-istioctl-1.12.6-1.el8.x86_64.rpm
istio-1.12.6-1.el8.x86_64.rpm
istio-istioctl-1.11.4-1.el8.x86_64.rpm
istio-1.11.4-1.el8.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/olcne-1.3.5-1.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/istio-1.12.6-1.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/istio-1.11.4-1.el8.src.rpm

Related CVEs:

CVE-2022-24726
CVE-2022-24921




Description of changes:

olcne
[1.3.5-1]
- Update Istio to 1.12.6(prometheus-2.30.1, grafana-7.5.15)

istio
[1.12.6-1]
- Addresses CVE-2022-24726, CVE-2022-24921

istio
[1.11.4-1]
- Added Oracle specific files for 1.11.4-1


container-registry.oracle.com/olcne/pilot:1.11.4
- CVE-2022-24726, CVE-2022-24921

container-registry.oracle.com/olcne/proxyv2:1.11.4
- CVE-2022-24726, CVE-2022-24921

container-registry.oracle.com/olcne/grafana:v7.3.7
- CVE-2022-24726, CVE-2022-24921

container-registry.oracle.com/olcne/prometheus:v2.30.1
- CVE-2022-24726, CVE-2022-24921

container-registry.oracle.com/olcne/pilot:1.12.6
- CVE-2022-24726, CVE-2022-24921

container-registry.oracle.com/olcne/proxyv2:1.12.6
- CVE-2022-24726, CVE-2022-24921

container-registry.oracle.com/olcne/grafana:v7.5.15
- CVE-2022-24726, CVE-2022-24921

_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle: ELSA-2022-9363: Oracle Important Security Update

The following updated rpms for Oracle Linux Cloud Native Environment 1.3 have been uploaded to the Unbreakable Linux Network:

Summary

olcne [1.3.5-1] - Update Istio to 1.12.6(prometheus-2.30.1, grafana-7.5.15) istio [1.12.6-1] - Addresses CVE-2022-24726, CVE-2022-24921 istio [1.11.4-1] - Added Oracle specific files for 1.11.4-1 container-registry.oracle.com/olcne/pilot:1.11.4 - CVE-2022-24726, CVE-2022-24921 container-registry.oracle.com/olcne/proxyv2:1.11.4 - CVE-2022-24726, CVE-2022-24921 container-registry.oracle.com/olcne/grafana:v7.3.7 - CVE-2022-24726, CVE-2022-24921 container-registry.oracle.com/olcne/prometheus:v2.30.1 - CVE-2022-24726, CVE-2022-24921 container-registry.oracle.com/olcne/pilot:1.12.6 - CVE-2022-24726, CVE-2022-24921 container-registry.oracle.com/olcne/proxyv2:1.12.6 - CVE-2022-24726, CVE-2022-24921 container-registry.oracle.com/olcne/grafana:v7.5.15 - CVE-2022-24726, CVE-2022-24921

SRPMs

http://oss.oracle.com/ol8/SRPMS-updates/olcne-1.3.5-1.el8.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/istio-1.12.6-1.el8.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/istio-1.11.4-1.el8.src.rpm

x86_64

olcnectl-1.3.5-1.el8.x86_64.rpm olcne-agent-1.3.5-1.el8.x86_64.rpm olcne-api-server-1.3.5-1.el8.x86_64.rpm olcne-utils-1.3.5-1.el8.x86_64.rpm olcne-nginx-1.3.5-1.el8.x86_64.rpm olcne-prometheus-chart-1.3.5-1.el8.x86_64.rpm olcne-grafana-chart-1.3.5-1.el8.x86_64.rpm olcne-istio-chart-1.3.5-1.el8.x86_64.rpm olcne-olm-chart-1.3.5-1.el8.x86_64.rpm istio-istioctl-1.12.6-1.el8.x86_64.rpm istio-1.12.6-1.el8.x86_64.rpm istio-istioctl-1.11.4-1.el8.x86_64.rpm istio-1.11.4-1.el8.x86_64.rpm

aarch64

i386

Severity
Related CVEs: CVE-2022-24726 CVE-2022-24921

Related News

19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved