Skip to content
OpenAdvisories
Medium RHBA-2019:0619 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.9 bug fix update

Published Sep 16, 2024 · Updated Feb 21, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.9::el7 ansible-service-broker 0:1.1.20-1.el7
Red Hat · OpenShift 3 openshift:3.9::el7 ansible-service-broker-container-scripts 0:1.1.20-1.el7
Red Hat · OpenShift 3 openshift:3.9::el7 ansible-service-broker-selinux 0:1.1.20-1.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-clients 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-clients-redistributable 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-cluster-capacity 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-docker-excluder 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-dockerregistry 0:3.9.74-1.git.0.b102e93.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-excluder 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-federation-services 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-master 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-node 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-pod 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-sdn-ovs 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-service-catalog 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-template-service-broker 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-tests 0:3.9.74-1.git.0.78e56ea.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-utils 0:3.9.74-1.git.0.70a0a63.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-web-console 0:3.9.74-1.git.50.93129da.el7
Red Hat · OpenShift 3 openshift:3.9::el7 cri-o 0:1.9.16-1.git78b2041.el7
Red Hat · OpenShift 3 openshift:3.9::el7 cri-o-debuginfo 0:1.9.16-1.git78b2041.el7
Red Hat · OpenShift 3 openshift:3.9::el7 golang-github-prometheus-node_exporter 0:3.9.74-1.git.0.2ab615c.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible 0:3.9.74-1.git.0.70a0a63.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible-docs 0:3.9.74-1.git.0.70a0a63.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible-playbooks 0:3.9.74-1.git.0.70a0a63.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible-roles 0:3.9.74-1.git.0.70a0a63.el7
Red Hat · OpenShift 3 openshift:3.9::el7 prometheus-node-exporter 0:3.9.74-1.git.0.2ab615c.el7

Vulnerabilities 1

  • Medium 6.4
    CVE-2019-1002101 Public exploit EPSS 13%

    kubectl cp path traversal

    The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in …

    Kubernetes Kubernetes k8s.io/kubernetes Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405961
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1500633
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1541911
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1589252
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1591158
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1601874
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1655404
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1657668
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1669965
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1672847
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679841
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1684048
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1684332
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1686587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1689149
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_0619.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-1002101
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1685213
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-1002101
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-1002101
  • article
    https://discuss.kubernetes.io/t/announce-security-release-of-kubernetes-kubectl-potential-directory-traversal-releases-1-11-9-1-12-7-1-13-5-and-1-14-0-cve-2019-1002101/5712