[Bug 1298116] New: kubernetes: Improper admission check control

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1298116

            Bug ID: 1298116
           Summary: kubernetes: Improper admission check control
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team(a)redhat.com
          Reporter: amaris(a)redhat.com
                CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org,
                    jcajka(a)redhat.com, jchaloup(a)redhat.com,
                    nhorman(a)redhat.com, vbatts(a)redhat.com



It was found that patch will check admission control with an empty object and
if it passes, then will proceed to update the object with the patch. Admission
control plugins don't get a chance to see/validate what is actually going to be
updated. 

CVE request:

http://seclists.org/oss-sec/2016/q1/76

Upstream patch:

https://github.com/deads2k/kubernetes/commit/d1e258afcf837cf70522c2950bb0...

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1298116] kubernetes: Improper admission check control

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1298116

Adam Mariš <amaris(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends On|                            |1298117



--- Comment #1 from Adam Mariš <amaris(a)redhat.com&gt; ---

Created kubernetes tracking bugs for this issue:

Affects: fedora-all [bug 1298117]


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1298117
[Bug 1298117] kubernetes: Improper admission check control [fedora-all]
-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1298116] kubernetes: Improper admission check control

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1298116

Adam Mariš <amaris(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |1298133



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1298116] kubernetes: Improper admission check control

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1298116

Kurt Seifried <kseifried(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |DUPLICATE
        Last Closed|                            |2016-01-13 13:38:31



--- Comment #2 from Kurt Seifried <kseifried(a)redhat.com&gt; ---


*** This bug has been marked as a duplicate of bug 1297910 ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1298116] kubernetes: Improper admission check control

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1298116
Bug 1298116 depends on bug 1298117, which changed state.

Bug 1298117 Summary: kubernetes: Improper admission check control [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1298117

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|MODIFIED                    |CLOSED
         Resolution|---                         |ERRATA



-- 
You are receiving this mail because:
You are on the CC list for the bug.