Skip to content

Release 2020-03-23

Choose a tag to compare

View all tags
@palma21 palma21 released this 26 Mar 19:03
· 3213 commits to master since this release
2020-03-23
e8f6ecc
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

This release is rolling out to all regions

Important Service Updates

  • AKS API version 2020-04-01 will default to VMSS (Virtual Machine Scale Sets), SLB (Standard Load Balancer) and RBAC enabled.
  • AKS has introduced AKS Ubuntu 18.04 in preview. During this time we will provide both OS versions side by side. After AKS Ubuntu 18.04 is GA, on the next cluster upgrade, clusters running AKS Ubuntu 16.04 will receive this new image.
  • Two security issues were discovered in Kubernetes that could lead to a recoverable denial of service.
    • CVE-2020-8551 affects the kubelet, and has been rated Medium (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    • CVE-2020-8552 affects the API server, and has also been rated Medium (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    • Am I vulnerable?
      • Only in cases where the attacker can make authorized resource requests to un-patched API server or kubelets.
      • Also AKS auto restarts apiserver and kubelet in the event of an OOM error which further limits exposure.
    • How can I get the latest patched API and kubelet and fix this vulnerability?
      • Upgrade to kubernetes versions v1.16.7 or v1.15.10. Or AKS preview versions v1.17.3

Release Notes

Assets 2
Loading