Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump K8s version to handle CVE-2020-8559, CVE-2020-8557 and CVE-2020-8558 #2674

Closed
Ebaneck opened this issue Jul 22, 2020 · 0 comments
Closed

Bump K8s version to handle CVE-2020-8559, CVE-2020-8557 and CVE-2020-8558 #2674

Ebaneck opened this issue Jul 22, 2020 · 0 comments
Assignees
@Ebaneck
Labels
complexity:easy Something that requires less than a day to fix kind:dependencies Pull requests that update a dependency file topic:security Security-related issues

Comments

@Ebaneck
Copy link
Contributor

Ebaneck commented Jul 22, 2020

Component:

'kubernetes', 'kubelet', 'kube-apiserver'

What happened:

The following CVE's were reported:

What was expected:

No security issues

Steps to reproduce

Resolution proposal (optional):

  • Bump the k8s version to specified fix versions
  • No regression
@Ebaneck Ebaneck added topic:security Security-related issues complexity:easy Something that requires less than a day to fix kind:dependencies Pull requests that update a dependency file labels Jul 22, 2020
Ebaneck added a commit that referenced this issue Jul 24, 2020
@Ebaneck
build/deps: bump k8s version to 1.16.13
693aada 
Refs: #2674
Ebaneck added a commit that referenced this issue Jul 24, 2020
@Ebaneck
build/deps: bump k8s version to 1.17.9
71a6b1e 
Refs: #2674
@Ebaneck Ebaneck mentioned this issue Jul 24, 2020
Merged
Ebaneck added a commit that referenced this issue Jul 27, 2020
@Ebaneck
build/deps: bump k8s version to 1.17.9
17f8a5f 
Refs: #2674

Closes: #2591
@Ebaneck Ebaneck mentioned this issue Jul 27, 2020
Merged
@Ebaneck Ebaneck self-assigned this Jul 29, 2020
@Ebaneck Ebaneck closed this as completed Jul 29, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Ebaneck Ebaneck

Labels
complexity:easy Something that requires less than a day to fix kind:dependencies Pull requests that update a dependency file topic:security Security-related issues
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Ebaneck