[SECURITY] Fedora 40 Update: kubernetes-1.29.4-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-ce2eefc399
2024-04-25 00:59:19.184672
--------------------------------------------------------------------------------
Name : kubernetes
Product : Fedora 40
Version : 1.29.4
Release : 1.fc40
URL : https://kubernetes.io/
Summary : Open Source Production-Grade Container Scheduling And Management Platform
Description :
Open Source Production-Grade Container Scheduling And Management Platform
Installs kubelet, the kubernetes agent on each machine in a
cluster. The kubernetes-client sub-package,
containing kubectl, is recommended but not strictly required.
The kubernetes-client sub-package should be installed on
control plane machines.
--------------------------------------------------------------------------------
Update Information:
Update Kubernetes to v1.29.4 for Fedora 40. Resolves CVE-2024-3177: Bypassing
mountable secrets policy imposed by the ServiceAccount admission plugin.
Additional bug and regression fixes include a bump to Golang.org/x/net to
v0.23.0 to address CVE-2023-45288 .
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 16 2024 Bradley G Smith <bradley.g.smith(a)gmail.com> - 1.29.4-1
- Update to v1.29.4
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-ce2eefc399' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------