istio security update

2023-06-0200:00:00

linux.oracle.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

42.3%

JSON

istio
[1.15.7-1]

Added Oracle specific files for 1.15.7-1
kubernetes
[1.24.8-2]
libct/cg: add misc controller to v1 drivers (upstream runc patch)
[1.24.8-1]
Added Oracle specific build files for Kubernetes
olcne
[1.5.12-6]
Updated the CVE ID’s in Istio-1.15.7 changelog entry
[1.5.12-5]
Bug fix - Append a slash in oci-instance-metada url
[1.5.12-4]
Update Istio version to 1.15.7 to address CVE’s
CVE-2023-27496
CVE-2023-27488
CVE-2023-27493
CVE-2023-27492
CVE-2023-27491
CVE-2023-27487
[1.5.12-3]
Updated olcne_version argument in olcnectl provision to support
[1.5.12-2]
Update kubelet for upstream runc misc cgroups patch
[1.5.12-1]
Fix the bug olcnectl provision fails if ol8_developer does not exist

OSVersionArchitecturePackageVersionFilename
oracle linux8srcistio< 1.15.7-1.el8istio-1.15.7-1.el8.src.rpm
oracle linux8srckubernetes< 1.24.8-2.el8kubernetes-1.24.8-2.el8.src.rpm
oracle linux8srcolcne< 1.5.12-6.el8olcne-1.5.12-6.el8.src.rpm
oracle linux8x86_64istio< 1.15.7-1.el8istio-1.15.7-1.el8.x86_64.rpm
oracle linux8x86_64istio-istioctl< 1.15.7-1.el8istio-istioctl-1.15.7-1.el8.x86_64.rpm
oracle linux8x86_64kubeadm< 1.24.8-2.el8kubeadm-1.24.8-2.el8.x86_64.rpm
oracle linux8x86_64kubectl< 1.24.8-2.el8kubectl-1.24.8-2.el8.x86_64.rpm
oracle linux8x86_64kubelet< 1.24.8-2.el8kubelet-1.24.8-2.el8.x86_64.rpm
oracle linux8x86_64olcne-agent< 1.5.12-6.el8olcne-agent-1.5.12-6.el8.x86_64.rpm
oracle linux8x86_64olcne-api-server< 1.5.12-6.el8olcne-api-server-1.5.12-6.el8.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	istio	< 1.15.7-1.el8	istio-1.15.7-1.el8.src.rpm
oracle linux	8	src	kubernetes	< 1.24.8-2.el8	kubernetes-1.24.8-2.el8.src.rpm
oracle linux	8	src	olcne	< 1.5.12-6.el8	olcne-1.5.12-6.el8.src.rpm
oracle linux	8	x86_64	istio	< 1.15.7-1.el8	istio-1.15.7-1.el8.x86_64.rpm
oracle linux	8	x86_64	istio-istioctl	< 1.15.7-1.el8	istio-istioctl-1.15.7-1.el8.x86_64.rpm
oracle linux	8	x86_64	kubeadm	< 1.24.8-2.el8	kubeadm-1.24.8-2.el8.x86_64.rpm
oracle linux	8	x86_64	kubectl	< 1.24.8-2.el8	kubectl-1.24.8-2.el8.x86_64.rpm
oracle linux	8	x86_64	kubelet	< 1.24.8-2.el8	kubelet-1.24.8-2.el8.x86_64.rpm
oracle linux	8	x86_64	olcne-agent	< 1.5.12-6.el8	olcne-agent-1.5.12-6.el8.x86_64.rpm
oracle linux	8	x86_64	olcne-api-server	< 1.5.12-6.el8	olcne-api-server-1.5.12-6.el8.x86_64.rpm