Summary
coredns
[1.3.1-1.0.6]
- Address CVE-2020-16845
[1.3.1-1.0.5]
- Fix image location
cri-o
[1.14.7-1.0.8]
- Address CVE-2020-16845
cri-tools
[1.14.0-1.0.6]
- Address CVE-2020-16845
etcd
[3.3.10-1.0.5]
- Address CVE-2020-16845
[3.3.10-1.0.4]
- Fix image location
flannel
[0.10.0-2.1.12]
- Address CVE-2020-16845
[0.10.0-2.1.11]
- Resize flannel image
[0.10.0-2.1.10]
- Fix image location
kata
[1.7.3-1.0.9]
- Address CVE-2020-16845
kata-agent
[1.7.3-1.0.6]
- Address CVE-2020-16845
kata-image
[1.7.3-1.0.6.1]
- Address CVE-2020-16845
kata-ksm-throttler
[1.7.3-1.0.5]
- Address CVE-2020-16845
kata-proxy
[1.7.3-1.0.5]
- Address CVE-2020-16845
kata-runtime
[1.7.3-1.0.6]
- Address CVE-2020-16845
kata-shim
[1.7.3-1.0.5]
- Address CVE-2020-16845
kubernetes
[1.14.9-1.0.9]
- Pin components min version
[1.14.9-1.0.8]
- Address CVE-2020-16845
kubernetes-cni
[0.7.1-1.0.3]
- Pin min version of cni-plugins
[0.7.1-1.0.2]
- Address CVE-2020-16845
kubernetes-cni-plugins
[0.8.6-1.0.3]
- Address CVE-2020-16845
kubernetes-dashboard
[1.10.1-1.1.8]
- Address CVE-2020-16845
[1.8.3-2.0.1]
- Update to v1.8.3
olcne
[1.0.7-2]
- kubernetes pod subnet flag not honored in flannel configuration
[1.0.7-1]
- Address CVE-2020-16845
yq
[2.4.0-1.0.5]
- Address CVE-2020-16845
Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | conmon | 0:1.14.7-1.0.8.el7 |
| Oracle Linux · 7 | coredns | 0:1.3.1-1.0.6.el7 |
| Oracle Linux · 7 | cri-o | 0:1.14.7-1.0.8.el7 |
| Oracle Linux · 7 | cri-tools | 0:1.14.0-1.0.6.el7 |
| Oracle Linux · 7 | etcd | 0:3.3.10-1.0.5.el7 |
| Oracle Linux · 7 | flannel | 0:0.10.0-2.1.12.el7 |
| Oracle Linux · 7 | kata | 0:1.7.3-1.0.9.el7 |
| Oracle Linux · 7 | kata-agent | 0:1.7.3-1.0.6.el7 |
| Oracle Linux · 7 | kata-image | 0:1.7.3-1.0.6.1.ol7_202008171204 |
| Oracle Linux · 7 | kata-ksm-throttler | 0:1.7.3-1.0.5.el7 |
| Oracle Linux · 7 | kata-proxy | 0:1.7.3-1.0.5.el7 |
| Oracle Linux · 7 | kata-runtime | 0:1.7.3-1.0.6.el7 |
| Oracle Linux · 7 | kata-shim | 0:1.7.3-1.0.5.el7 |
| Oracle Linux · 7 | kubeadm | 0:1.14.9-1.0.9.el7 |
| Oracle Linux · 7 | kubectl | 0:1.14.9-1.0.9.el7 |
| Oracle Linux · 7 | kubelet | 0:1.14.9-1.0.9.el7 |
| Oracle Linux · 7 | kubernetes-cni | 0:0.7.1-1.0.3.el7 |
| Oracle Linux · 7 | kubernetes-cni-plugins | 0:0.8.6-1.0.3.el7 |
| Oracle Linux · 7 | kubernetes-dashboard | 0:1.10.1-1.1.8.el7 |
| Oracle Linux · 7 | olcne-agent | 0:1.0.7-2.el7 |
| Oracle Linux · 7 | olcne-api-server | 0:1.0.7-2.el7 |
| Oracle Linux · 7 | olcne-nginx | 0:1.0.7-2.el7 |
| Oracle Linux · 7 | olcne-utils | 0:1.0.7-2.el7 |
| Oracle Linux · 7 | olcnectl | 0:1.0.7-2.el7 |
| Oracle Linux · 7 | yq | 0:2.4.0-1.0.5.el7 |
Vulnerabilities 1
-
Unscored —
Unbounded read from invalid inputs in encoding/binary
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.