Upbound Official
provider-family-oci
By upbound
Last changed 2 months ago
Languages
Support
Upbound Supported
12 months window ends 2026/08/12
Security & Maintenance
CVE Remediation
Backporting
Upbound signed

Notice something off about this package? Help us keep the marketplace safe and trustworthy by reporting inappropriate content or behavior.

Report this package
Overview
Upbound's official Crossplane provider to manage Oracle Cloud Infrastructure (OCI) config services in Kubernetes.

Summary

This release includes critical security vulnerability remediations.

Highlights

  • Security fixes: Remediated 11 CVE vulnerabilities in Go standard library (6 High, 5 Medium severity)
  • Go version update: Updated from Go 1.25.9 to 1.25.10
  • CI improvements: Updated workflow configurations to use the new Go version

CVEs Addressed

High Severity:

  • CVE-2026-39820
  • CVE-2026-42499
  • CVE-2026-39836
  • CVE-2026-33814
  • CVE-2026-33811
  • CVE-2026-42501

Medium Severity:

  • CVE-2026-39817
  • CVE-2026-39826
  • CVE-2026-39825
  • CVE-2026-39823
  • CVE-2026-39819