{"id":"ECHO-fd52-1a86-4159","summary":"Race in Kubernetes namespace termination (k/k#126587), scoped upstream to\n\"kube-apiserver \u003e= v1.3\" — control-plane behaviour, not library code a\nclient can reach. We ship only the image-updater client; k8s.io/kubernetes\nis transitive, and the binary carries no pkg/registry, pkg/controller or\npkg/kubeapiserver symbols on either arch (`go tool nm`). Fixed cluster-side\nby KEP-5080 (stable 1.34); GO-2025-3547 lists no fix, so no bump clears it.\n","modified":"2026-09-08T10:45:13.164165410Z","published":"2026-06-22T13:45:03.084Z","withdrawn":"2026-09-08T10:27:57.100Z","upstream":["CVE-2024-7598","GHSA-r56h-j38w-hrqq"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2024-7598"},{"type":"WEB","url":"https://github.com/advisories/GHSA-r56h-j38w-hrqq"}],"affected":[{"package":{"name":"argocd-image-updater","ecosystem":"Echo","purl":"pkg:deb/echo/argocd-image-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.28","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.28"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.15+e8"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.29","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.29"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.15+e26"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.29-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.29-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.15+e18"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.30","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.30"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.14+e18"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.30-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.30-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.14+e21"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.31","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.31"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.14+e24"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.31-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.31-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.14+e24"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.32","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.32"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.13+e20"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.32-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.32-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.13+e21"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.33","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.33"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.13+e11"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.33-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.33-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.13+e10"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.34","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.34"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.11+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.34-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.34-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.11+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.35","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.35"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.8+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.35-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.35-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.8+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.36","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.36"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.4+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.36-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.36-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.4+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.37","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.37"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"kubernetes-1.37-fips","ecosystem":"Echo","purl":"pkg:deb/echo/kubernetes-1.37-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"rancher-kuberlr-kubectl-3","ecosystem":"Echo","purl":"pkg:deb/echo/rancher-kuberlr-kubectl-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"rancher-kuberlr-kubectl-4","ecosystem":"Echo","purl":"pkg:deb/echo/rancher-kuberlr-kubectl-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"rancher-kuberlr-kubectl-5","ecosystem":"Echo","purl":"pkg:deb/echo/rancher-kuberlr-kubectl-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"rancher-kuberlr-kubectl-6","ecosystem":"Echo","purl":"pkg:deb/echo/rancher-kuberlr-kubectl-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"rancher-kuberlr-kubectl-7","ecosystem":"Echo","purl":"pkg:deb/echo/rancher-kuberlr-kubectl-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}},{"package":{"name":"rancher-kuberlr-kubectl-8","ecosystem":"Echo","purl":"pkg:deb/echo/rancher-kuberlr-kubectl-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"}}],"schema_version":"1.9.0"}