871738 – (CVE-2021-25749) <sys-cluster/kubelet-{1.22.14,1.23.11,1.25.0}: Windows workloads disobey runAsNonRoot setting

Bug 871738 (CVE-2021-25749) - <sys-cluster/kubelet-{1.22.14,1.23.11,1.25.0}: Windows workloads disobey runAsNonRoot setting

Summary: <sys-cluster/kubelet-{1.22.14,1.23.11,1.25.0}: Windows workloads disobey runA...

Status:	RESOLVED FIXED

Alias:	CVE-2021-25749

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:	https://www.openwall.com/lists/oss-se...
Whiteboard:	B4 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2022-09-19 16:26 UTC by John Helmert III
Modified:	2023-11-23 17:51 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description John Helmert III archtester

2022-09-19 16:26:16 UTC

"Hello Kubernetes Community,

A security issue was discovered in Kubernetes that could allow Windows
workloads to run as ContainerAdministrator even when those workloads set
the runAsNonRoot option to true ."

Please bump to 1.22.14, 1.23.11, and 1.25.0. Seems like no fixes for 1.24.

Comment 1 William Hubbs gentoo-dev

2022-10-15 18:58:08 UTC

This is bumped and cleaned up.

Comment 2 John Helmert III archtester

2022-10-15 19:31:03 UTC

Thanks!