--- title: Canonical publishes auto-apply vulnerability patch for Kubernetes description: Canonical publishes auto-apply vulnerability patches for CVE-2018-1002105 for clusters running the Charmed Distribution of Kubernetes. url: https://ubuntu.com/blog/canonical-kubernetes-clusters-auto-apply-vulnerability-patches-for-cve-2018-1002105 --- 1. [Blog](https://ubuntu.com/blog) 2. Article --- [Thibaut Rouffineau](https://ubuntu.com/blog/author/thibautr "More about Thibaut Rouffineau") 4 December 2018 # Canonical publishes auto-apply vulnerability patch for Kubernetes [Charmed Kubernetes](https://ubuntu.com/blog/tag/charmed-kubernetes) [Cloud security](https://ubuntu.com/blog/tag/cloud-security) [k8s](https://ubuntu.com/blog/tag/k8s) [kubernetes](https://ubuntu.com/blog/tag/kubernetes) [Security](https://ubuntu.com/blog/tag/security) --- Share the article ## Charmed distribution of Kubernetes clusters auto-apply vulnerability patches for CVE-2018-1002105 On December 3 2018,  the [Kubernetes](https://kubernetes.io) project [disclosed](https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88) a security vulnerability in all versions of its popular container orchestration software. The vulnerability, [CVE-2018-1002105](https://github.com/kubernetes/kubernetes/issues/71411), exists in the Kubernetes API server, and allows an attacker to send arbitrary requests to backend cluster services, such as kubelets. The flaw effectively allows any user to gain full administrator privileges on any compute node in the cluster. Worse still, it is nearly impossible to detect whether the security hole has been exploited. Patches have been released to fix the security flaw in all supported versions of Kubernetes, and are available in versions 1.10.11, 1.11.5, and 1.12.3. Although some non-upgrade mitigations are possible, they are likely to be disruptive, and the Kubernetes team strongly recommends upgrading to one of the patched versions listed above. For users of the [Charmed Distribution of Kubernetes](https://www.ubuntu.com/kubernetes) (CDK), updating to the patched versions requires no manual intervention. As of December 4 2018 in the morning, CDK clusters running any supported version (1.10.x, 1.11.x, 1.12.x) will begin to receive and apply the patches automatically, thanks to the auto-updating nature of [snap](https://snapcraft.io/) packages. For CDK users running versions older than 1.10, Canonical recommends [upgrading](https://www.ubuntu.com/kubernetes/docs/upgrading) to a supported version as soon as possible. ## Newsletter signup Get the latest Ubuntu news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. In submitting this form, I confirm that I have read and agree to [Canonical's Privacy Notice](https://canonical.com/legal/data-privacy/contact) and [Privacy Policy](https://canonical.com/legal/data-privacy). Sign up ## Share on --- ## Related posts [### Fixes available for CVE-2026-92392 and other curl vulnerabilities](https://ubuntu.com/blog/curl-vulnerabilities-fixes-available) Introduction On 7 October 2026, Daniel Stenberg published a blog post describing a plan to release a new version of curl on 14 October 2026 in order to address 22 known... [Luci Stanescu](https://ubuntu.com/blog/author/lucistanescu) 14 October 2026 [### What’s new in security for Ubuntu 26.10?](https://ubuntu.com/blog/ubuntu-26-10-security) Ubuntu 26.10 “Stonking Stingray” arrives at a time when AI tools are accelerating vulnerability discovery. Patching faster is essential, but the resilience of the underlying... [Ijlal Loutfi](https://ubuntu.com/blog/author/ijlal-loutfi) 6 October 2026 [### Confidential computing in the real world: finding your use case](https://ubuntu.com/blog/confidential-computing-use-cases) Confidential computing is essential when an organization needs to process sensitive data on infrastructure where the operators should not have access to it. You might have seen... [Ijlal Loutfi](https://ubuntu.com/blog/author/ijlal-loutfi) 2 October 2026 [### Canonical joins the Open Secure AI Alliance](https://ubuntu.com/blog/open-secure-ai-alliance) Canonical is now part of the Open Secure AI Alliance, announced by NVIDIA with partners across cloud computing, cybersecurity, enterprise software, open source foundations, and... [Canonical](https://ubuntu.com/blog/author/canonical) 28 August 2026