Summary
olcne
[1.0.3-1]
- updated the default Kubernetes version to 1.14.9
kubernetes
[1.14.9-1.0.3]
- [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads
[1.14.9-1.0.2]
- Use bounded crio version
[1.14.9-1.0.1]
- Added Oracle specific build files for Kubernetes
cri-o
[1.14.7-1.0.5]
- Enhance versioning detection
[1.14.7-1.0.4]
- Golang CVE-2019-16276
[1.14.7-1.0.3]
- added THIRD_PARTY_LICENSES.txt file
[1.14.7-1.0.2]
- moved to semantic versioning for Release
[1.14.7-1]
- Added Oracle Specifile Files for cri-o
cri-tools
[1.14.0-1.0.5]
- Enhance versioning to support rpm Provides
[1.14.0-1.0.4]
- Golang CVE-2019-16276
[1.14.0-1.0.3]
- added THIRD_PARTY_LICENSES.txt file
[1.14.0-1.0.2]
- moved to semantic versioning for Release and added Url
[1.14.0-1]
- Added Oracle Specific Build Files for cri-tools
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | conmon | 0:1.14.7-1.0.7.el7 |
| Oracle Linux · 7 | cri-o | 0:1.14.7-1.0.7.el7 |
| Oracle Linux · 7 | cri-tools | 0:1.14.0-1.0.5.el7 |
| Oracle Linux · 7 | kubeadm | 0:1.14.9-1.0.3.el7 |
| Oracle Linux · 7 | kubectl | 0:1.14.9-1.0.3.el7 |
| Oracle Linux · 7 | kubelet | 0:1.14.9-1.0.3.el7 |
| Oracle Linux · 7 | olcne-agent | 0:1.0.3-1.el7 |
| Oracle Linux · 7 | olcne-api-server | 0:1.0.3-1.el7 |
| Oracle Linux · 7 | olcne-nginx | 0:1.0.3-1.el7 |
| Oracle Linux · 7 | olcne-utils | 0:1.0.3-1.el7 |
| Oracle Linux · 7 | olcnectl | 0:1.0.3-1.el7 |
Vulnerabilities 1
-
Medium 6.5
Kubernetes API Server denial of service vulnerability from malicious YAML payloads
The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.