whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update AKS mitigation link (#12632)

Browse Source 
* Update AKS mitigation link

Updated to include link to AKS documentation on mitigation.

* Updated Microsoft Recommendation

Updated with suggested changes
This commit is contained in:
Dave Strebel
2019-02-14 22:14:39 -08:00
committed by Kubernetes Prow Robot
parent 461fadb8c3
commit 3e5cb3d78a
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/blog/_posts/2019-02-11-runc-CVE-2019-5736.md
+4
View File
@@ -75,6 +75,10 @@ Google has issued a [security bulletin](https://cloud.google.com/kubernetes-engi
Amazon has also issued a [security bulletin](https://aws.amazon.com/security/security-bulletins/AWS-2019-002/) with more detailed information. All EKS users should mitigate the issue or upgrade to a new node image.
#### Azure Kubernetes Service (AKS)
Microsoft has issued a [security bulletin](https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/) with detailed information on mitigating the issue. Microsoft recommends all AKS users to upgrade their cluster to mitigate the issue.
### Docker
We don't have specific confirmation that Docker for Mac and Docker for Windows are vulnerable, however it seems likely. Docker has released a fix in [version 18.09.2](https://github.com/docker/docker-ce/releases/tag/v18.09.2) and it is recommended you upgrade to it. This also applies to other deploy systems using Docker under the hood.