elsa-2020-5726

oracle_linux
Description

grafana [%{}-1.0.1] - Added Oracle Specific Build Files for grafana kubernetes-cni [0.7.1-1.0.1] - Added Oracle specific build files for Kubernetes CNI kubernetes-cni-plugins [0.8.6-1.0.1] - Added Oracle specific build files for Kubernetes CNI Plugins kubernetes [1.14.9-1.0.4] - CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements - CVE-2020-8555: Half-Blind SSRF in kube-controller-manager [1.14.9-1.0.3] - [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads [1.14.9-1.0.2] - Use bounded crio version [1.14.9-1.0.1] - Added Oracle specific build files for Kubernetes kubernetes [1.17.6-1.0.2.el7] - Update to kubernetes-cni for CVE-2020-10749 [1.17.6-1.0.2.el7] - Added Oracle specific build files for Kubernetes olcne [1.1.1-1] - Update Istio to use Grafana 6.7.4 to address CVE-2020-13379 - Kubernetes update due to CVE-2020-10749 and CVE-2020-8555

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2020-13379",
    "CVE-2020-8555",
    "CVE-2020-10749"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "grafana\n[%{}-1.0.1]\n- Added Oracle Specific Build Files for grafana\n\nkubernetes-cni\n[0.7.1-1.0.1]\n- Added Oracle specific build files for Kubernetes CNI\n\nkubernetes-cni-plugins\n[0.8.6-1.0.1]\n- Added Oracle specific build files for Kubernetes CNI Plugins\n\nkubernetes\n[1.14.9-1.0.4]\n- CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements\n- CVE-2020-8555: Half-Blind SSRF in kube-controller-manager\n\n[1.14.9-1.0.3]\n- [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads\n\n[1.14.9-1.0.2]\n- Use bounded crio version\n\n[1.14.9-1.0.1]\n- Added Oracle specific build files for Kubernetes\n\nkubernetes\n[1.17.6-1.0.2.el7]\n- Update to kubernetes-cni for CVE-2020-10749\n\n[1.17.6-1.0.2.el7]\n- Added Oracle specific build files for Kubernetes\n\nolcne\n[1.1.1-1]\n- Update Istio to use Grafana 6.7.4 to address CVE-2020-13379\n- Kubernetes update due to CVE-2020-10749 and CVE-2020-8555",
  "id": "ELSA-2020-5726",
  "ovalId": "oval:com.oracle.elsa:def:20205726",
  "source": "oracle_linux",
  "title": "ELSA-2020-5726:  grafana kubernetes-cni kubernetes-cni-plugins kubernetes kubernetes olcne security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2020-5726.html"
}
View JSON API Download JSON