Summary
kubernetes-cni-plugins
[0.8.6-1.0.1]
- Added Oracle specific build files for Kubernetes CNI Plugins
kubernetes-cni
[0.7.1-1.0.1]
- Added Oracle specific build files for Kubernetes CNI
kubernetes
[1.14.9-1.0.4]
- CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
- CVE-2020-8555: Half-Blind SSRF in kube-controller-manager
[1.14.9-1.0.3]
- [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads
[1.14.9-1.0.2]
- Use bounded crio version
[1.14.9-1.0.1]
- Added Oracle specific build files for Kubernetes
olcne
[1.0.4-1]
- CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
- CVE-2020-8555: Half-Blind SSRF in kube-controller-manager
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kubeadm | 0:1.14.9-1.0.4.el7 |
| Oracle Linux · 7 | kubectl | 0:1.14.9-1.0.4.el7 |
| Oracle Linux · 7 | kubelet | 0:1.14.9-1.0.4.el7 |
| Oracle Linux · 7 | kubernetes-cni | 0:0.7.1-1.0.1.el7 |
| Oracle Linux · 7 | kubernetes-cni-plugins | 0:0.8.6-1.0.2.el7 |
| Oracle Linux · 7 | olcne-agent | 0:1.0.4-2.el7 |
| Oracle Linux · 7 | olcne-api-server | 0:1.0.4-2.el7 |
| Oracle Linux · 7 | olcne-nginx | 0:1.0.4-2.el7 |
| Oracle Linux · 7 | olcne-utils | 0:1.0.4-2.el7 |
| Oracle Linux · 7 | olcnectl | 0:1.0.4-2.el7 |
Vulnerabilities 2
-
Medium 6.3
Kubernetes kube-controller-manager SSRF
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary in…
-
Medium 6.0CVE-2020-10749 Public exploit
containernetworking/plugins vulnerable to MitM attacks
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IP…