Amazon-eks-ami: update for CVE-2019-9512 and CVE-2019-9514?

[TiloGit]

any news how EKS is effected by: CVE-2019-9512 and CVE-2019-9514?

[micahhausler]

As stated in the issue template, please do not report CVE or security issues on public github issues.

Please report any suspected or confirmed security issues to AWS Security https://aws.amazon.com/security/vulnerability-reporting/

[dgonzalez]

Well, actually the CVE is public. It is in all the public databases of vulnerabilities affecting all the kubernetes distributions. I hope you just missread the issue instead of deliverately close it.

[dgonzalez]

https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA

[whereisaaron]

Shhhhh... if we don’t discuss it here, no one will know...

[micahhausler]

Sorry @whereisaaron it’s AWS policy to not have security discussions in public forums. If you have security questions about AWS products, please contact AWS security