Packages / Debian 12 (Bookworm) / Source / admin / kubernetes

Source Package: kubernetes (1.20.5+really1.20.2-1.1+deb12u1)

Kubernetes client binary (kubectl)

The following binary packages are built from this source package:

kubernetes-client
Kubernetes client binary (kubectl)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

Fixed and unaffected versions (20)

CVE	Severity	Version impact
[CVE-2026-19444] Published: Sep 28, 2026, 11:38:10 AM UTC A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a ta	Medium(6.5)	Not affected Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Not affected nvd · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Not affected nvd · kubernetes · debian · bookworm
[CVE-2026-2270] Published: Sep 15, 2026, 4:00:00 PM UTC kubernetes: CVE-2026-2270	Medium(5.9)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2026-76654] Published: Sep 15, 2026, 4:00:00 PM UTC kubernetes: CVE-2026-76654	Medium(5.8)	Not affected Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Not affected dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Not affected dsa · kubernetes · debian · bookworm
[CVE-2025-13281] Published: Dec 1, 2025, 11:00:00 PM UTC kubernetes: CVE-2025-13281	Medium(5.8)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm
[CVE-2025-5187] Published: Aug 12, 2025, 4:00:00 PM UTC kubernetes: CVE-2025-5187	Medium(6.7)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2025-4563] Published: Jun 19, 2025, 12:00:00 AM UTC kubernetes: CVE-2025-4563	Low(2.7)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2025-1767] Published: Mar 13, 2025, 12:00:00 AM UTC kubernetes: CVE-2025-1767	Medium(6.5)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2025-0426] Published: Feb 13, 2025, 3:16:13 PM UTC kubernetes: CVE-2025-0426	Medium(6.2)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2024-10220] Published: Nov 8, 2024, 4:00:00 PM UTC kubernetes: CVE-2024-10220	High(8.1)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2024-5321] Published: Jul 17, 2024, 10:00:00 PM UTC kubernetes: CVE-2024-5321	Medium(6.1)	Not affected Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Not affected dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Not affected dsa · kubernetes · debian · bookworm
[CVE-2024-7598] Published: Jan 1, 2024, 12:00:00 AM UTC kubernetes: CVE-2024-7598	Low(3.1)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2019-11243] Published: Feb 15, 2023, 4:12:46 AM UTC kubernetes: CVE-2019-11243	High(8.1)	Not affected Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Not affected dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Not affected dsa · kubernetes · debian · bookworm
[CVE-2022-3294] Published: Nov 10, 2022, 5:00:00 PM UTC kubernetes: CVE-2022-3294	High(8.8)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm
[CVE-2022-3162] Published: Nov 10, 2022, 4:00:00 PM UTC kubernetes: CVE-2022-3162	Medium(6.5)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm
[CVE-2022-3172] Published: Sep 16, 2022, 12:00:00 AM UTC kubernetes: CVE-2022-3172	Medium(5.1)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm
[CVE-2021-25741] Published: Sep 15, 2021, 4:00:00 PM UTC kubernetes: CVE-2021-25741	High(8.8)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2021-25740] Published: Jul 14, 2021, 10:00:00 PM UTC kubernetes: CVE-2021-25740	Low(3.1)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2021-25737] Published: May 18, 2021, 12:00:00 AM UTC kubernetes: CVE-2021-25737	Low(2.7)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
[CVE-2021-25736] Published: May 10, 2021, 12:00:00 AM UTC kubernetes: CVE-2021-25736	Medium(6.3)	Not affected Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Not affected dsa · kubernetes · debian · bookworm `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Not affected dsa · kubernetes · debian · bookworm
[CVE-2021-25735] Published: Apr 14, 2021, 12:00:00 AM UTC kubernetes: CVE-2021-25735	Medium(6.5)	Fixed Details (2) `1.20.5+really1.20.2-1.1+deb12u1` · amd64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12 `1.20.5+really1.20.2-1.1+deb12u1` · arm64 · bookworm Fixed · Fixed: `1.20.5+really1.20.2-1` dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12

[Next results]

Last synced: Oct 28, 2026, 1:40:02 AM UTC

[CVE catalog]

Sources

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified