SUSE Container Update Advisory: sles12/velum
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2019:611-1
Container Tags        : sles12/velum:0.0 , sles12/velum:0.0-3.36.2
Container Release     : 3.36.2
Severity              : important
Type                  : security
References            : 1114832 1121146 1121147 1121148 1121447 1122439 1123291 1123650
                        CVE-2019-3682 
-----------------------------------------------------------------

The container sles12/velum was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2019:416-1
Released:    Fri Feb 15 11:43:01 2019
Summary:     Security update for velum
Type:        security
Severity:    important
References:  1114832,1121146,1121147,1121148,1121447,1122439,1123291,1123650,CVE-2019-3682
This update provides the following fixes:

kubernetes-salt:

- Force basename on the system certificate name to prevent path traversal (bsc#1121147)
- CVE-2019-3682: Disable insecure port in kube-apiserver (bsc#1121148)
- Insecure API port exposed to all Master Node guest containers (bsc#1121148)
- Fixes included in this change:
  * bsc#1121146 - Kubernetes – Kubelet Service allows unauthenticated access to Kubelet API
  * bsc#1122439 - failed to parse bool none (bsc#1122439)
  * bsc#1123291 - CaasP 3.0 Update Admin node, worker and master failed
  * bsc#1123650 - ExperimentalCriticalPodAnnotation feature not enabled
  * bsc#1114832 - Running supportconfig on any node can take lots of resources, 
    even fill the hard disk on big/long-running clusters

velum:

- Do not allow '.' or '/' symbols in system certificate names. (bsc#1121447)
- Reverting ignore_vol_az option back to Velum CPI (bsc#1122439)
- Adding LDAP support to Velum that will create the 
  requisite org units in LDAP if they are missing

sles12sp3-velum-image:

- Release 3.1.9 to include a fix (bsc#1122439,bsc#1121447)

docker-kubic:

- Add daemon.json file with rotation logs configuration (bsc#1114832)