https://bugzilla.redhat.com/show_bug.cgi?id=1298116
Bug ID: 1298116 Summary: kubernetes: Improper admission check control Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: eparis@redhat.com, golang@lists.fedoraproject.org, jcajka@redhat.com, jchaloup@redhat.com, nhorman@redhat.com, vbatts@redhat.com
It was found that patch will check admission control with an empty object and if it passes, then will proceed to update the object with the patch. Admission control plugins don't get a chance to see/validate what is actually going to be updated.
CVE request:
http://seclists.org/oss-sec/2016/q1/76
Upstream patch:
https://github.com/deads2k/kubernetes/commit/d1e258afcf837cf70522c2950bb0aef...
https://bugzilla.redhat.com/show_bug.cgi?id=1298116
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1298117
--- Comment #1 from Adam Mariš amaris@redhat.com ---
Created kubernetes tracking bugs for this issue:
Affects: fedora-all [bug 1298117]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1298117 [Bug 1298117] kubernetes: Improper admission check control [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1298116
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1298133
https://bugzilla.redhat.com/show_bug.cgi?id=1298116
Kurt Seifried kseifried@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |DUPLICATE Last Closed| |2016-01-13 13:38:31
--- Comment #2 from Kurt Seifried kseifried@redhat.com ---
*** This bug has been marked as a duplicate of bug 1297910 ***
https://bugzilla.redhat.com/show_bug.cgi?id=1298116 Bug 1298116 depends on bug 1298117, which changed state.
Bug 1298117 Summary: kubernetes: Improper admission check control [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1298117
What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution|--- |ERRATA
golang@lists.fedoraproject.org