Summary
kubernetes
[1.12.10-1.0.15]
- Address CVE-2020-16845
kubeadm-ha-setup
[0.0.2-1.0.73]
- Fix update to coredns image tag
[0.0.2-1.0.72]
- Address CVE-2020-16845
kubernetes-cni
[0.7.1-1.0.3]
- Pin min version of cni-plugins
kubernetes-cni-plugins
[0.8.6-1.0.3]
- Address CVE-2020-16845
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kubeadm | 0:1.12.10-1.0.15.el7 |
| Oracle Linux · 7 | kubeadm-ha-setup | 0:0.0.2-1.0.73.el7 |
| Oracle Linux · 7 | kubectl | 0:1.12.10-1.0.15.el7 |
| Oracle Linux · 7 | kubelet | 0:1.12.10-1.0.15.el7 |
| Oracle Linux · 7 | kubernetes-cni | 0:0.7.1-1.0.3.el7 |
| Oracle Linux · 7 | kubernetes-cni-plugins | 0:0.8.6-1.0.3.el7 |
Vulnerabilities 1
-
Unscored —
Unbounded read from invalid inputs in encoding/binary
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.