ELSA-2019-4720

ELSA-2019-4720 - kubernetes security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-07-29

Description

[1.9.11-2.7.1]
- [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache='
- creates world-writeable cached schema files

[1.9.11-2.6.1]
- [OLCNE-382] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the sa credentials

Related CVEs

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	kubernetes-1.9.11-2.7.1.el7.src.rpm	cd7f2b0c087105868480f1f371c67c82	ELBA-2021-9240
	kubeadm-1.9.11-2.7.1.el7.x86_64.rpm	9c9a51bbe329472c872111017e3d1558	ELBA-2021-9240
	kubectl-1.9.11-2.7.1.el7.x86_64.rpm	4accd51443543f461e8eb3e5ce911029	ELBA-2021-9240
	kubelet-1.9.11-2.7.1.el7.x86_64.rpm	f63e094547636fc65f45844818f8a8b1	ELBA-2021-9240

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team