Описание
Security update for kubernetes1.25
This update for kubernetes1.25 fixes the following issues:
- CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400)
Other fixes:
- Included kubernetes1.25-client package. (jsc#PED-5755)
Список пакетов
SUSE Linux Enterprise Module for Containers 15 SP5
kubernetes1.25-client-1.25.16-150400.9.10.1
kubernetes1.25-client-common-1.25.16-150400.9.10.1
SUSE Linux Enterprise Module for Containers 15 SP6
kubernetes1.25-client-1.25.16-150400.9.10.1
kubernetes1.25-client-common-1.25.16-150400.9.10.1
openSUSE Leap 15.5
kubernetes1.25-client-1.25.16-150400.9.10.1
kubernetes1.25-client-common-1.25.16-150400.9.10.1
openSUSE Leap 15.6
kubernetes1.25-apiserver-1.25.16-150400.9.10.1
kubernetes1.25-client-1.25.16-150400.9.10.1
kubernetes1.25-client-bash-completion-1.25.16-150400.9.10.1
kubernetes1.25-client-common-1.25.16-150400.9.10.1
kubernetes1.25-client-fish-completion-1.25.16-150400.9.10.1
kubernetes1.25-controller-manager-1.25.16-150400.9.10.1
kubernetes1.25-kubeadm-1.25.16-150400.9.10.1
kubernetes1.25-kubelet-1.25.16-150400.9.10.1
kubernetes1.25-kubelet-common-1.25.16-150400.9.10.1
kubernetes1.25-proxy-1.25.16-150400.9.10.1
kubernetes1.25-scheduler-1.25.16-150400.9.10.1
Ссылки
- Link for SUSE-SU-2024:2928-1
- E-Mail link for SUSE-SU-2024:2928-1
- SUSE Security Ratings
- SUSE Bug 1194400
- SUSE CVE CVE-2021-25743 page
Описание
kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.
Затронутые продукты
SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.25-client-1.25.16-150400.9.10.1
SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.25-client-common-1.25.16-150400.9.10.1
SUSE Linux Enterprise Module for Containers 15 SP6:kubernetes1.25-client-1.25.16-150400.9.10.1
SUSE Linux Enterprise Module for Containers 15 SP6:kubernetes1.25-client-common-1.25.16-150400.9.10.1
Ссылки
- CVE-2021-25743
- SUSE Bug 1194400