From 3e5cb3d78a13324385a9a14bab46a3cecb5516ba Mon Sep 17 00:00:00 2001 From: Dave Strebel Date: Thu, 14 Feb 2019 22:14:39 -0800 Subject: [PATCH] Update AKS mitigation link (#12632) * Update AKS mitigation link Updated to include link to AKS documentation on mitigation. * Updated Microsoft Recommendation Updated with suggested changes --- content/en/blog/_posts/2019-02-11-runc-CVE-2019-5736.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/content/en/blog/_posts/2019-02-11-runc-CVE-2019-5736.md b/content/en/blog/_posts/2019-02-11-runc-CVE-2019-5736.md index 31968b1379..b5414e8c5b 100644 --- a/content/en/blog/_posts/2019-02-11-runc-CVE-2019-5736.md +++ b/content/en/blog/_posts/2019-02-11-runc-CVE-2019-5736.md @@ -75,6 +75,10 @@ Google has issued a [security bulletin](https://cloud.google.com/kubernetes-engi Amazon has also issued a [security bulletin](https://aws.amazon.com/security/security-bulletins/AWS-2019-002/) with more detailed information. All EKS users should mitigate the issue or upgrade to a new node image. +#### Azure Kubernetes Service (AKS) + +Microsoft has issued a [security bulletin](https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/) with detailed information on mitigating the issue. Microsoft recommends all AKS users to upgrade their cluster to mitigate the issue. + ### Docker We don't have specific confirmation that Docker for Mac and Docker for Windows are vulnerable, however it seems likely. Docker has released a fix in [version 18.09.2](https://github.com/docker/docker-ce/releases/tag/v18.09.2) and it is recommended you upgrade to it. This also applies to other deploy systems using Docker under the hood.