Skip to content
OpenAdvisories
High ELSA-2019-4720 0 CVEs

Important: kubernetes security update (Oracle Linux 7)

Published Jul 29, 2019 · Updated Jul 29, 2019

Summary

[1.9.11-2.7.1]
- [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>'
- creates world-writeable cached schema files

[1.9.11-2.6.1]
- [OLCNE-382] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the sa credentials

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 kubeadm 0:1.9.11-2.7.1.el7
Oracle Linux · 7 kubectl 0:1.9.11-2.7.1.el7
Oracle Linux · 7 kubelet 0:1.9.11-2.7.1.el7