Lucene search
OracleLinuxELSA-2021-9546HistoryNov 09, 2021 - 12:00 a.m.
olcne istio istio kubernetes security update
2021-11-0900:00:00
linux.oracle.com
6
8.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
olcne
[1.3.2-2]
- Turn off default PodDisruptionBudget in istio template to unblock kubernetes module upgrade
- Update Kubernetes version to 1.20.11 to address CVE-2021-25741
- Update Istio to 1.9.8, 1.10.4 to address CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781
- Update proxyv2 image to select iptables legacy or latest based on host operating system
- Fix major.minor k8s version
istio
[1.10.4-3] - Updated iptables-switch for OL8 and OL7 logic
[1.10.4-2] - Bump release, addresses the following envoy CVEs,
CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781
[1.10.4-1] - Added Oracle specific files for 1.10.4-1
istio
[1.9.8-3] - Updated iptables-switch for OL8 and OL7 logic
[1.9.8-2] - Bump release, addresses the following envoy CVEs,
CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781
[1.9.8-1] - Added Oracle specific files for 1.9.8-1
kubernetes
[1.20.11-4] - Fix major.minor version
[1.20.11-3] - Updated iptables-switch for OL8 and OL7 logic
[1.20.11-2] - Bump release for CVE fix, addresses CVE-2021-25741
[1.20.11-1] - Added Oracle specific build files for Kubernetes
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | istio | < 1.10.4-3.el8 | istio-1.10.4-3.el8.src.rpm |
| oracle linux | 8 | src | istio | < 1.9.8-3.el8 | istio-1.9.8-3.el8.src.rpm |
| oracle linux | 8 | src | kubernetes | < 1.20.11-4.el8 | kubernetes-1.20.11-4.el8.src.rpm |
| oracle linux | 8 | src | olcne | < 1.3.2-2.el8 | olcne-1.3.2-2.el8.src.rpm |
| oracle linux | 8 | x86_64 | istio | < 1.10.4-3.el8 | istio-1.10.4-3.el8.x86_64.rpm |
| oracle linux | 8 | x86_64 | istio | < 1.9.8-3.el8 | istio-1.9.8-3.el8.x86_64.rpm |
| oracle linux | 8 | x86_64 | istio-istioctl | < 1.10.4-3.el8 | istio-istioctl-1.10.4-3.el8.x86_64.rpm |
| oracle linux | 8 | x86_64 | istio-istioctl | < 1.9.8-3.el8 | istio-istioctl-1.9.8-3.el8.x86_64.rpm |
| oracle linux | 8 | x86_64 | kubeadm | < 1.20.11-4.el8 | kubeadm-1.20.11-4.el8.x86_64.rpm |
| oracle linux | 8 | x86_64 | kubectl | < 1.20.11-4.el8 | kubectl-1.20.11-4.el8.x86_64.rpm |
Related
nessus
nessus
Oracle Linux 8 : olcne / istio / istio / kubernetes (ELSA-2021-9546)
2021-11-10 00:00:00
Oracle Linux 7 : olcne (ELSA-2021-9525)
2021-11-09 00:00:00
Oracle Linux 7 : olcne (ELSA-2021-9526)
2021-11-09 00:00:00
oraclelinux
oraclelinux
olcne security update
2021-11-09 00:00:00
olcne security update
2021-11-10 00:00:00
redhat
redhat
osv
osv
CVE-2021-32777
2021-08-24 21:15:06
CVE-2021-39206
2021-09-09 23:15:13
BIT-envoy-2021-32779
2024-03-06 10:58:04
prion
prion
Authorization
2021-09-09 23:15:00
Authorization
2021-08-24 21:15:00
Design/Logic Flaw
2021-08-24 21:15:00
github
github
Incorrect Authorization with specially crafted requests
2021-09-10 17:54:25
Files or Directories Accessible to External Parties in kubernetes
2021-11-01 17:32:28
Incorrect handling of H2 GOAWAY + SETTINGS frames
2021-09-10 17:54:01
cve
cve
redhatcve
redhatcve
veracode
veracode
Denial Of Service (DoS)
2021-08-29 19:44:52
Authorization Bypass
2021-08-29 19:44:47
Denial Of Service (DoS)
2021-08-29 19:44:50
ibm
ibm
cnvd
cnvd
kubernetes input validation error vulnerability
2021-09-17 00:00:00
gitlab
gitlab
Files or Directories Accessible to External Parties
2021-11-01 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0112
2021-10-04 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0112
2021-10-04 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-25741 affecting package kubernetes-1.20.9 1.20.9-7
2024-04-25 09:08:10
CVE-2021-25741 affecting package kubernetes-1.19.13 1.19.13-5
2024-04-25 09:08:10
CVE-2021-25741 affecting package kubernetes-1.21.2 1.21.2-7
2024-04-25 09:08:10
debiancve
debiancve
CVE-2021-25741
2021-09-20 17:15:00
githubexploit
githubexploit
altlinux
altlinux
Security fix for the ALT Linux 10 package kubernetes version 1.22.4-alt1
2021-12-02 00:00:00
8.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for ELSA-2021-9546