Skip to content
OpenAdvisories
High ELSA-2019-4716 1 CVE

Important: kubernetes security update (Oracle Linux 7)

Published Jul 29, 2019 · Updated Jul 29, 2019

Ecosystem: Oracle Linux

Summary

[1.12.7-1.2.3]
- [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>'
- creates world-writeable cached schema files

[1.12.7-1.1.3]
- [OCNE-372] kubeadm: properly umount dirs in /var/lib/kubelet

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 kubeadm 0:1.12.7-1.2.3.el7
Oracle Linux · 7 kubectl 0:1.12.7-1.2.3.el7
Oracle Linux · 7 kubelet 0:1.12.7-1.2.3.el7

Vulnerabilities 1

  • Low 3.3
    CVE-2019-11244

    kubectl creates world-writeable cached schema files

    In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed at a different locati…

    Kubernetes Kubernetes k8s.io/client-go Go