Shulou(Shulou.com)06/02 Report--

Author | Gao Xianglin, Chen Jun

Industry news update TLDR for 1.19 to reflect deadline changes

Affected by the epidemic, the release of Kubernetes 1.19 release was postponed for 3 weeks and adjusted to August 25th.

Notice of fixing kube-controller-manager SSRF-related vulnerabilities

There is a SSRF vulnerability CVE-2020-8555 in the kube-controller-manager component. Attackers who authenticate and authenticate can attack the unauthenticated authentication protection interface through the control node (Master Node) network to obtain any information of the cluster. The following versions are within the scope of this CVE:

Kube-controller-manager v1.16.0~v1.16.8kube-controller-manager

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.