ELSA-2019-4720

ELSA-2019-4720 - kubernetes security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-07-29

Description

[1.9.11-2.7.1]
- [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache='
- creates world-writeable cached schema files

[1.9.11-2.6.1]
- [OLCNE-382] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the sa credentials

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kubernetes-1.9.11-2.7.1.el7.src.rpm	04375a55391a06a9afc12a6a9eb90279319bd6ef7defb2223dff3ed574313790	ELSA-2024-12329	ol7_x86_64_addons
	kubeadm-1.9.11-2.7.1.el7.x86_64.rpm	7805a45b7a9835bd469638363841845d9fc9e049de7a4034821369762b9f8bd9	ELSA-2024-12329	ol7_x86_64_addons
	kubectl-1.9.11-2.7.1.el7.x86_64.rpm	733dc49b41cc84d5ab5e832467c134e194c267bb1857799fef414d4b4f1c2ce9	ELSA-2024-12329	ol7_x86_64_addons
	kubelet-1.9.11-2.7.1.el7.x86_64.rpm	3f657e93aca4e22a9e54940ea58caa20e8a4c7fc4700aa9fed9f5c2d73184ddc	ELSA-2024-12329	ol7_x86_64_addons

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team