Oval Definition:oval:org.opensuse.security:def:64872
Revision Date:2020-12-23Version:1
Title:Security changes in Kubernetes, etcd, and helm; Bugfix in cri-o package (Moderate)
Description:

= Required Actions

== Kubernetes & etcd (Security fixes)

This fix involves an upgrade of Kubernetes and some add-ons. See https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/_cluster_updates.html#_updating_kubernetes_components for the upgrade procedure. == Skuba & helm/helm3

In order to update skuba and helm or helm 3, you need to update the management workstation. See detailed instructions at https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/_cluster_updates.html#_update_management_workstation

= Known Issues

Modifying the file `/etc/sysconfig/kubelet` directly is not supported: documentation at https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/_miscellaneous.html#_configuring_kubelet

Be sure to check the Release Notes at https://www.suse.com/releasenotes/x86_64/SUSE-CAASP/4/#_changes_in_4_2_4 for any additional known issues or behavioral changes.
Family:unixClass:patch
Status:Reference(s):1065729
1071995
1085030
1133021
1145383
1154492
1155094
1156395
1159058
1159856
1159858
1159860
1160250
1160251
1160634
1162825
1169790
1171634
1171688
1172108
1172418
1172871
1173485
1173798
1174003
1174026
1174219
1174387
1174699
1174771
1174777
1174800
1174951
1175128
1175199
1175232
1175440
1175493
1175546
1175550
1175654
1175691
1175768
1175769
1175770
1175771
1175772
1175774
1175775
1175834
1175873
1176069
1176752
1176753
1176754
1176755
1177351
1177352
1177661
1177662
CVE-2019-14806
CVE-2019-15691
CVE-2019-15692
CVE-2019-15693
CVE-2019-15694
CVE-2019-15695
CVE-2019-18348
CVE-2019-9674
CVE-2020-14314
CVE-2020-14386
CVE-2020-15106
CVE-2020-15112
CVE-2020-15184
CVE-2020-15185
CVE-2020-15186
CVE-2020-15187
CVE-2020-7069
CVE-2020-7070
CVE-2020-8565
CVE-2020-8566
openSUSE-SU-2020:0087-1
openSUSE-SU-2020:1382-1
openSUSE-SU-2020:1703-1
SUSE-SU-2019:2365-1
SUSE-SU-2020:1339-1
SUSE-SU-2020:3760-1
Platform(s):openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Containers 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libXvnc-devel-1.9.0-lp151.4.3 is installed
  • OR libXvnc1-1.9.0-lp151.4.3 is installed
  • OR tigervnc-1.9.0-lp151.4.3 is installed
  • OR tigervnc-x11vnc-1.9.0-lp151.4.3 is installed
  • OR xorg-x11-Xvnc-1.9.0-lp151.4.3 is installed
  • OR xorg-x11-Xvnc-java-1.9.0-lp151.4.3 is installed
  • OR xorg-x11-Xvnc-module-1.9.0-lp151.4.3 is installed
  • OR xorg-x11-Xvnc-novnc-1.9.0-lp151.4.3 is installed
  • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • kernel-debug-5.3.18-lp152.41 is installed
  • OR kernel-debug-devel-5.3.18-lp152.41 is installed
  • OR kernel-default-5.3.18-lp152.41 is installed
  • OR kernel-default-base-5.3.18-lp152.41.1.lp152.8.6 is installed
  • OR kernel-default-base-rebuild-5.3.18-lp152.41.1.lp152.8.6 is installed
  • OR kernel-default-devel-5.3.18-lp152.41 is installed
  • OR kernel-devel-5.3.18-lp152.41 is installed
  • OR kernel-docs-5.3.18-lp152.41 is installed
  • OR kernel-docs-html-5.3.18-lp152.41 is installed
  • OR kernel-kvmsmall-5.3.18-lp152.41 is installed
  • OR kernel-kvmsmall-devel-5.3.18-lp152.41 is installed
  • OR kernel-macros-5.3.18-lp152.41 is installed
  • OR kernel-obs-build-5.3.18-lp152.41 is installed
  • OR kernel-obs-qa-5.3.18-lp152.41 is installed
  • OR kernel-preempt-5.3.18-lp152.41 is installed
  • OR kernel-preempt-devel-5.3.18-lp152.41 is installed
  • OR kernel-source-5.3.18-lp152.41 is installed
  • OR kernel-source-vanilla-5.3.18-lp152.41 is installed
  • OR kernel-syms-5.3.18-lp152.41 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 15 SP1 is installed
  • AND Package Information
  • kubernetes-client-1.17.13-4.21.2 is installed
  • OR kubernetes-common-1.17.13-4.21.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • python-Werkzeug-0.14.1-6.3 is installed
  • OR python3-Werkzeug-0.14.1-6.3 is installed
  • BACK