Security Advisory

Google Product Security Update Advisory

  • Oct 18 2024

Overview

 

An update has been released to address vulnerabilities in Google Products. Users of the affected versions are advised to update to the latest version.

 

Affected Products

 

CVE-2024-9486

  • Kubernetes Image Builder versions: ~ 0.1.37 (inclusive)

 

 

Resolved Vulnerabilities

 

Weak authentication and session management vulnerability in Kubernetes Image Builder (CVE-2024-9486)

 

Vulnerability Patches

 

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2024-9486

  • Kubernetes Image Builder version: 0.1.38

 

 

Referenced Sites

 

[1] CVE-2024-9486 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-9486

[2] [Security Advisory] CVE-2024-9486 and CVE-2024-9594: VM images built with Kubernetes Image Builder use default credentials

https://groups.google.com/g/kubernetes-security-announce/c/UKJG-oZogfA/m/Lu1hcnHmAQAJ

Tags:

Previous Post

Next Post