Summary
kubernetes
[1.18.10-3]
- Kata CVE-2020-28914
kata-proxy
[1.11.5-1]
- Added Oracle Specific Build Files for kata-proxy
kata-shim
[1.11.5-1]
- Added Oracle Specific Build Files for kata-shim
kata-ksm-throttler
[1.11.5-1]
- Added Oracle Specific Build Files for kata-ksm-throttler
kata-runtime
[1.11.5-1]
- Added Oracle Specific Files For kata-runtime
kata-agent
[1.11.5-1]
- Added Oracle Specific Build Files for kata-agent
kata-image
[1.11.5-1]
- Added Oracle Specific Build Files for kata-image
kata
[1.11.5-2]
- Update to kata 1.11.5
olcne
[1.2.2-1]
- Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to 1.11.5
[1.2.1-1]
- Enhance the Kubernetes module to restrict the usage of external IPs
- Address CVE-2020-8554: man-in-the-middle vulnerability using Kubernetes service External IPs
[1.2.0-4]
- Add support for deprecating module args
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kata | 0:1.11.5-2.el8 |
| Oracle Linux · 7 | kata-agent | 0:1.11.5-1.el8 |
| Oracle Linux · 7 | kata-image | 0:1.11.5-1.1.ol8_202101151826 |
| Oracle Linux · 7 | kata-ksm-throttler | 0:1.11.5-1.el8 |
| Oracle Linux · 7 | kata-proxy | 0:1.11.5-1.el8 |
| Oracle Linux · 7 | kata-runtime | 0:1.11.5-1.el8 |
| Oracle Linux · 7 | kata-shim | 0:1.11.5-1.el8 |
| Oracle Linux · 7 | kubeadm | 0:1.18.10-3.el8 |
| Oracle Linux · 7 | kubectl | 0:1.18.10-3.el8 |
| Oracle Linux · 7 | kubelet | 0:1.18.10-3.el8 |
| Oracle Linux · 7 | olcne-agent | 0:1.2.2-1.el8 |
| Oracle Linux · 7 | olcne-api-server | 0:1.2.2-1.el8 |
| Oracle Linux · 7 | olcne-istio-chart | 0:1.2.2-1.el8 |
| Oracle Linux · 7 | olcne-nginx | 0:1.2.2-1.el8 |
| Oracle Linux · 7 | olcne-prometheus-chart | 0:1.2.2-1.el8 |
| Oracle Linux · 7 | olcne-utils | 0:1.2.2-1.el8 |
| Oracle Linux · 7 | olcnectl | 0:1.2.2-1.el8 |
Vulnerabilities 2
-
Medium 6.3CVE-2020-8554 Public exploit
Kubernetes man in the middle using LoadBalancer or ExternalIPs
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a pri…
-
Unscored —
An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath vo…