Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-1074

Высокий

ALT-PU-2019-1074: package kubernetes update to version 1.13.2-alt1

Источник
errata.altlinux.org
Дата публикации
18.01.2019
Дата обновления
26.02.2026
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kubernetes to version 1.13.2-alt1.

Устраненные уязвимости1

Ссылки2

ALT-PU-2019-1074https://errata.altlinux.org/ALT-PU-2019-1074

GHSA-gc2p-g4fg-29vh

https://github.com/advisories/GHSA-gc2p-g4fg-29vh

Связанные уязвимости

redhat логотип

CVE-2019-11243

CVSS3: 3.1
redhat
больше 7 лет назад

In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certificate/key data). In the affected versions, rest.AnonymousClientConfig() did not effectively clear service account credentials loaded using rest.InClusterConfig()

nvd логотип

CVE-2019-11243

CVSS3: 8.1
nvd
больше 7 лет назад

In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certificate/key data). In the affected versions, rest.AnonymousClientConfig() did not effectively clear service account credentials loaded using rest.InClusterConfig()

debian логотип

CVE-2019-11243

CVSS3: 8.1
debian
больше 7 лет назад

In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientCon ...

github логотип

GHSA-gc2p-g4fg-29vh

CVSS3: 8.1
github
больше 4 лет назад

Kubernetes did not effectively clear service account credentials