renovate-rancher[bot]
commented
2 months ago ℹ Artifact update notice
File name: go.mod
In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):
- 6 additional dependencies were updated
Details:
| Package | Change |
|---|---|
github.com/golang/protobuf |
v1.5.3 -> v1.5.4 |
golang.org/x/crypto |
v0.16.0 -> v0.21.0 |
golang.org/x/net |
v0.19.0 -> v0.23.0 |
golang.org/x/sys |
v0.16.0 -> v0.18.0 |
golang.org/x/term |
v0.15.0 -> v0.18.0 |
google.golang.org/protobuf |
v1.32.0 -> v1.33.0 |
This PR contains the following updates:
v1.27.10->v1.27.16v1.27.10->v1.27.16GitHub Vulnerability Alerts
CVE-2024-3177
A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.
CVE-2024-5321
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
Release Notes
kubernetes/kubernetes (k8s.io/kubernetes)
### [`v1.27.16`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.27.16): Kubernetes v1.27.16 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.27.15...v1.27.16) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) for more details. ### [`v1.27.15`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.27.15): Kubernetes v1.27.15 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.27.14...v1.27.15) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) for more details. ### [`v1.27.14`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.27.14): Kubernetes v1.27.14 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.27.13...v1.27.14) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) for more details. ### [`v1.27.13`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.27.13): Kubernetes v1.27.13 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.27.12...v1.27.13) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) for more details. ### [`v1.27.12`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.27.12): Kubernetes v1.27.12 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.27.11...v1.27.12) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) for more details. ### [`v1.27.11`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.27.11): Kubernetes v1.27.11 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.27.10...v1.27.11) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) for more details.Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.