Paco Xu

Update zlib in debian-base:bullseye-v1.2.0 (latest) to patch CVE-2018-25032 #109319

1

### What happened? https://github.com/kubernetes/kubernetes/issues/109319 ### What did you expect to happen? base image ### How can we reproduce it (as minimally and precisely as possible)? NA ### Anything else we...

CVE-2021-38561: Update golang.org/x/text to v0.3.7

2

### What happened? The community will handle 1.21-1.20. 1.19- ### What did you expect to happen? update deps ### How can we reproduce it (as minimally and precisely as possible)?...

CVE-2021-43565: Update golang.org/x/crypto to v0.0.0-20211202192323-5770296d904e #108464

1

### What happened? https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-43565 1.20- ### What did you expect to happen? NA ### How can we reproduce it (as minimally and precisely as possible)? NA ### Anything else we...

Track kubernetes cves every month

2

### What would you like to be added? https://github.com/kubernetes/sig-security/issues/1 It would be continuous work. The list would be helpful. ### Why is this needed? https://github.com/ismyk8ssecure/ismyk8ssecure 可以参考

How to track special version support in klts?

1

### What happened? For instance, to make the risk lower, some customers may request an LTS version for a special version like 1.10.11. ### What did you expect to happen?...

### What happened? https://github.com/kubernetes/kubernetes/pull/107438/files ### What did you expect to happen? 1.21 目前还没cherry-pick 之前版本应该也需要 ### How can we reproduce it (as minimally and precisely as possible)? kubeproxy 使用 ipvs 和某些内核版本需要注意下...

Add patch for CVE-2021-25741

2

- [x] Website PR: https://github.com/klts-io/website/pull/14 - [x] 1.18 PR: https://github.com/klts-io/kubernetes-lts/pull/83 - [ ] ### Details https://github.com/kubernetes/kubernetes/issues/104980 A security issue was discovered in Kubernetes where a user may be able to...

CVE in gogo-protobuf https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121

1

### What happened? CVE in gogo-protobuf 8.6 HIGH ### What did you expect to happen? fix CVE ### How can we reproduce it (as minimally and precisely as possible)? NA...

### What happened? https://github.com/kubernetes/kubernetes/issues/106639 ### What did you expect to happen? upgrade containerd to 1.4.12 and upgrade cadvisor ### How can we reproduce it (as minimally and precisely as possible)?...

NodeSwap feature supports in kubeadm

39

## Is this a BUG REPORT or FEATURE REQUEST? FEATURE REQUEST /kind feature ## Versions **kubeadm version** (use `kubeadm version`): NodeSwap is alpha in 1.22 and will be beta1 in...