ELSA-2019-4718

ELSA-2019-4718 - kubernetes security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-07-29

Description

[1.11.3-2.7.2]
- [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache='
- creates world-writeable cached schema files

[1.11.3.2.6.2]
- [OLCNE-384] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the serviceaccount credentials from config created by rest.InClusterConfig()

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kubernetes-1.11.3-2.7.2.el7.src.rpm	b3786b28437def2aefe6f80bb0f33453697892b07efac7cb1935d2452b85966e	ELSA-2024-12329	ol7_x86_64_addons
	kubeadm-1.11.3-2.7.2.el7.x86_64.rpm	f4fed194d1be0a3ecd9d3b9e6af1558bf6124df6025047ad1a3a4f58b21f612c	ELSA-2024-12329	ol7_x86_64_addons
	kubectl-1.11.3-2.7.2.el7.x86_64.rpm	65826df8799cd83df191e69e9f8a77ae133d78641aea594dced820a4b6622207	ELSA-2024-12329	ol7_x86_64_addons
	kubelet-1.11.3-2.7.2.el7.x86_64.rpm	9c78e1f090ce54663bf452c84892f4e653d6d4833b687f7229270fd40b90a28c	ELSA-2024-12329	ol7_x86_64_addons

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team