diff --git a/CHANGELOG-1.13.md b/CHANGELOG-1.13.md index 26088eba117..2dc4c72c56b 100644 --- a/CHANGELOG-1.13.md +++ b/CHANGELOG-1.13.md @@ -218,9 +218,10 @@ filename | sha512 hash ## Changelog since v1.13.8 -**No notable changes for this release** - +* Fix CVE-2019-11249: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal ([#80436](https://github.com/kubernetes/kubernetes/pull/80436)) +* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750)) +See also the [security announcement for this release](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM). # v1.13.8 diff --git a/CHANGELOG-1.14.md b/CHANGELOG-1.14.md index 109adad006c..89f0af0991e 100644 --- a/CHANGELOG-1.14.md +++ b/CHANGELOG-1.14.md @@ -170,9 +170,10 @@ filename | sha512 hash ## Changelog since v1.14.4 -**No notable changes for this release** - +* Fix CVE-2019-11249: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal ([#80436](https://github.com/kubernetes/kubernetes/pull/80436)) +* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750)) +See also the [security announcement for this release](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM). # v1.14.4 diff --git a/CHANGELOG-1.15.md b/CHANGELOG-1.15.md index fc173a0cdcf..f8057d3e7ff 100644 --- a/CHANGELOG-1.15.md +++ b/CHANGELOG-1.15.md @@ -176,9 +176,10 @@ filename | sha512 hash ## Changelog since v1.15.1 -**No notable changes for this release** - +* Fix CVE-2019-11249: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal ([#80436](https://github.com/kubernetes/kubernetes/pull/80436)) +* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750)) +See also the [security announcement for this release](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM). # v1.15.1