Debian/kubernetes: medium 5.5
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected
Action: Upgrade kubernetes to 1.20.5+really1.20.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.20.5+really1.20.2-1 | - |
Fixed versions
| 1.20.5+really1.20.2-1 |
Sources
- osv: DEBIAN-CVE-2023-2431#Debian:13/kubernetes
- https://security-tracker.debian.org/tracker/CVE-2023-2431
published · modified · JSON