Summary
[1.11.3-2.7.2]
- [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>'
- creates world-writeable cached schema files
[1.11.3.2.6.2]
- [OLCNE-384] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the serviceaccount credentials from config created by rest.InClusterConfig()
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kubeadm | 0:1.11.3-2.7.2.el7 |
| Oracle Linux · 7 | kubectl | 0:1.11.3-2.7.2.el7 |
| Oracle Linux · 7 | kubelet | 0:1.11.3-2.7.2.el7 |