[GHSA-j9wf-vvm6-4r9w] Unverified Ownership in Kubernetes

[mberges21]

Updates

• Affected products

Comments
CVE-2020-8554 was addressed in commit 9d81c4e. However, upon analyzing the commit, we observed that the patch version (v1.21.0-alpha.1)

[darakian]

Hi @mberges21, would you mind explaining how the commit 9d81c4e relates to this advisory? I don't see it or the PR its linked to in the references.

[mberges21]

@darakian
had the perception the issue fix was merged o kubernetes/kubernetes#96296 I may have misunderstood?

[darakian]

It could be. I see that they're discussing a cve in that thread, but I just want to be sure it's the correct cve. What lead you to that PR. What lead you to that PR? Just the description?

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.