Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2859-1

Опубликовано: 08 авг. 2024
Источник: suse-cvrf

Описание

Security update for kubernetes1.24

This update for kubernetes1.24 fixes the following issues:

  • CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400)

Список пакетов

SUSE Linux Enterprise Module for Containers 15 SP5
kubernetes1.24-client-1.24.17-150500.3.19.1
kubernetes1.24-client-common-1.24.17-150500.3.19.1
openSUSE Leap 15.5
kubernetes1.24-apiserver-1.24.17-150500.3.19.1
kubernetes1.24-client-1.24.17-150500.3.19.1
kubernetes1.24-client-bash-completion-1.24.17-150500.3.19.1
kubernetes1.24-client-common-1.24.17-150500.3.19.1
kubernetes1.24-client-fish-completion-1.24.17-150500.3.19.1
kubernetes1.24-controller-manager-1.24.17-150500.3.19.1
kubernetes1.24-kubeadm-1.24.17-150500.3.19.1
kubernetes1.24-kubelet-1.24.17-150500.3.19.1
kubernetes1.24-kubelet-common-1.24.17-150500.3.19.1
kubernetes1.24-proxy-1.24.17-150500.3.19.1
kubernetes1.24-scheduler-1.24.17-150500.3.19.1
openSUSE Leap 15.6
kubernetes1.24-apiserver-1.24.17-150500.3.19.1
kubernetes1.24-client-1.24.17-150500.3.19.1
kubernetes1.24-client-bash-completion-1.24.17-150500.3.19.1
kubernetes1.24-client-common-1.24.17-150500.3.19.1
kubernetes1.24-client-fish-completion-1.24.17-150500.3.19.1
kubernetes1.24-controller-manager-1.24.17-150500.3.19.1
kubernetes1.24-kubeadm-1.24.17-150500.3.19.1
kubernetes1.24-kubelet-1.24.17-150500.3.19.1
kubernetes1.24-kubelet-common-1.24.17-150500.3.19.1
kubernetes1.24-proxy-1.24.17-150500.3.19.1
kubernetes1.24-scheduler-1.24.17-150500.3.19.1

Описание

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.


Затронутые продукты
SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.24-client-1.24.17-150500.3.19.1
SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.24-client-common-1.24.17-150500.3.19.1
openSUSE Leap 15.5:kubernetes1.24-apiserver-1.24.17-150500.3.19.1
openSUSE Leap 15.5:kubernetes1.24-client-1.24.17-150500.3.19.1

Ссылки
Уязвимость SUSE-SU-2024:2859-1 - exploitDog