[Git][security-tracker-team/security-tracker][master] new k8s issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c420ea2d by Moritz Muehlenhoff at 2025-08-28T09:58:39+02:00
new k8s issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,7 +23,11 @@ CVE-2025-9525 (A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by t
 CVE-2025-9523 (A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is  ...)
 	NOT-FOR-US: Tenda
 CVE-2025-5187 (A vulnerability exists in the NodeRestriction admission controller in  ...)
-	TODO: check
+	- kubernetes 1.20.5+really1.20.2-1
+	NOTE: Server components no longer built since 1.20.5+really1.20.2-1, marking that as fixed version
+	NOTE: The source package itself it still vulnerable, but custom rebuilds are not really a usecase here
+	NOTE: https://github.com/kubernetes/kubernetes/issues/133471
+	NOTE: https://groups.google.com/g/kubernetes-security-announce/c/znSNY7XCztE
 CVE-2025-5101 (An issue has been discovered in GitLab CE/EE affecting all versions be ...)
 	TODO: check
 CVE-2025-58218 (Deserialization of Untrusted Data vulnerability in enituretechnology S ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c420ea2d11fd24da7fa51d32e5fe2bdf1dbb451f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c420ea2d11fd24da7fa51d32e5fe2bdf1dbb451f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250828/27a02d13/attachment.htm>