Kubernetes security fix timeline
Public commits from kubernetes/kubernetes whose messages cite a vulnerability or a security fix. Patch text is not stored.
24 security-fix timeline events
Mar 6, 2024 · CVE-2024-24786
[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
Merge pull request #123758 from liggitt/protobump [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
Oct 17, 2023
update filepath-securejoin to 0.2.4 to fix transitional security vulnerability
Merge pull request #120870 from lvedder/chore/update-dependency-filepath-securejoin-to-0.2.4 update filepath-securejoin to 0.2.4 to fix transitional security vulnerability
Oct 12, 2023
Add govulncheck script to expose go vulnerabilities
Merge pull request #120562 from ArkaSaha30/govulncheck-script Add govulncheck script to expose go vulnerabilities
Sep 25, 2023
update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
Sep 11, 2023
Add govulncheck script to expose go vulnerabilities
Add govulncheck script to expose go vulnerabilities
Jul 28, 2021
Fixes (temporarily) curl piped to shell security vulnerability
Merge pull request #103960 from seans3/security-vulnerability-fix Fixes (temporarily) curl piped to shell security vulnerability
Jul 27, 2021
Fixes (temporarily) curl piped to shell security vulnerability
Fixes (temporarily) curl piped to shell security vulnerability
May 27, 2021 · CVE-2020-26160
Transitive dependency: high CVE fix
Transitive dependency: high CVE fix heketi that is dependency for glusterfs was updated to import a fork of jwt-go that fixes a high severity CVE-2020-26160 by importing a forked repo (form3tech-oss/jwt-go) that fixes the CVE as the original repo (dgrijalva/jwt-go) has a fix wi…
Jan 12, 2021
Run pause image as non-root user and group
Run pause image as non-root user and group We now build the pause image to use a pseudo user and group 65535:65535. This increases the security aspect of the container image, if a vulnerability would directly affect the pause container.
Jun 19, 2020
[security] Vulnerability in golang.org/x/text/encoding/unicode v0.3.2
Merge pull request #92219 from voor/update-golang-text [security] Vulnerability in golang.org/x/text/encoding/unicode v0.3.2