{"cves":["CVE-2020-13379","CVE-2020-8555","CVE-2020-10749"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"grafana\n[%{}-1.0.1]\n- Added Oracle Specific Build Files for grafana\n\nkubernetes-cni\n[0.7.1-1.0.1]\n- Added Oracle specific build files for Kubernetes CNI\n\nkubernetes-cni-plugins\n[0.8.6-1.0.1]\n- Added Oracle specific build files for Kubernetes CNI Plugins\n\nkubernetes\n[1.14.9-1.0.4]\n- CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements\n- CVE-2020-8555: Half-Blind SSRF in kube-controller-manager\n\n[1.14.9-1.0.3]\n- [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads\n\n[1.14.9-1.0.2]\n- Use bounded crio version\n\n[1.14.9-1.0.1]\n- Added Oracle specific build files for Kubernetes\n\nkubernetes\n[1.17.6-1.0.2.el7]\n- Update to kubernetes-cni for CVE-2020-10749\n\n[1.17.6-1.0.2.el7]\n- Added Oracle specific build files for Kubernetes\n\nolcne\n[1.1.1-1]\n- Update Istio to use Grafana 6.7.4 to address CVE-2020-13379\n- Kubernetes update due to CVE-2020-10749 and CVE-2020-8555","id":"ELSA-2020-5726","ovalId":"oval:com.oracle.elsa:def:20205726","source":"oracle_linux","title":"ELSA-2020-5726:  grafana kubernetes-cni kubernetes-cni-plugins kubernetes kubernetes olcne security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2020-5726.html"}