state

Nov 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 3, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 29, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 17, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 1, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Changes in this version

+ const CheckpointAPIGroup

+ const CheckpointAPIVersion

+ const CheckpointKind

+ type Checkpoint struct

+ Checksum uint32

+ Data string

+ func NewCheckpoint(data ClaimInfoStateList) (*Checkpoint, error)

+ func (cp *Checkpoint) GetClaimInfoStateList() (ClaimInfoStateList, error)

+ func (cp *Checkpoint) MarshalCheckpoint() ([]byte, error)

+ func (cp *Checkpoint) UnmarshalCheckpoint(blob []byte) error

+ func (cp *Checkpoint) VerifyChecksum() error

+ type CheckpointData struct

+ ClaimInfoStateList ClaimInfoStateList

+ type Checkpointer interface

+ GetOrCreate func() (*Checkpoint, error)

+ Store func(*Checkpoint) error

+ func NewCheckpointer(stateDir, checkpointName string) (Checkpointer, error)

type ClaimInfoState

+ DriverState map[string]DriverState

+ func (in *ClaimInfoState) DeepCopy() *ClaimInfoState

+ func (in *ClaimInfoState) DeepCopyInto(out *ClaimInfoState)

+ type Device struct

+ CDIDeviceIDs []string

+ DeviceName string

+ PoolName string

+ RequestNames []string

+ func (in *Device) DeepCopy() *Device

+ func (in *Device) DeepCopyInto(out *Device)

+ type DriverState struct

+ Devices []Device

+ func (in *DriverState) DeepCopy() *DriverState

+ func (in *DriverState) DeepCopyInto(out *DriverState)

Aug 6, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 18, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 17, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Apr 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 27, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 13, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 28, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 21, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 2, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 10, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 15, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

type ClaimInfoState

+ ResourceHandles []resourcev1alpha2.ResourceHandle

+ type ClaimInfoStateListWithoutResourceHandles []ClaimInfoStateWithoutResourceHandles

+ type ClaimInfoStateWithoutResourceHandles struct

+ CDIDevices map[string][]string

+ ClaimName string

+ ClaimUID types.UID

+ ClassName string

+ DriverName string

+ Namespace string

+ PodUIDs sets.Set[string]

+ type DRAManagerCheckpointWithoutResourceHandles struct

+ Checksum checksum.Checksum

+ Entries ClaimInfoStateListWithoutResourceHandles

+ Version string

Aug 10, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 6, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 20, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 8, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 30, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 17, 2024 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ func NewCheckpointState(stateDir, checkpointName string) (*stateCheckpoint, error)

+ type CheckpointState interface

+ GetOrCreate func() (ClaimInfoStateList, error)

+ Store func(ClaimInfoStateList) error

+ type ClaimInfoState struct

+ CDIDevices map[string][]string

+ ClaimName string

+ ClaimUID types.UID

+ ClassName string

+ DriverName string

+ Namespace string

+ PodUIDs sets.Set[string]

+ type ClaimInfoStateList []ClaimInfoState

+ type DRAManagerCheckpoint struct

+ Checksum checksum.Checksum

+ Entries ClaimInfoStateList

+ Version string

+ func NewDRAManagerCheckpoint() *DRAManagerCheckpoint

+ func (dc *DRAManagerCheckpoint) MarshalCheckpoint() ([]byte, error)

+ func (dc *DRAManagerCheckpoint) UnmarshalCheckpoint(blob []byte) error

+ func (dc *DRAManagerCheckpoint) VerifyChecksum() error

Apr 6, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes