Skip to content
OpenAdvisories
Medium RHBA-2019:2794 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.1.16 packages update

Published Sep 16, 2024 · Updated Feb 21, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.1::el7 atomic-enterprise-service-catalog 1:4.1.16-201909090609.git.1.cc4acc1.el7
Red Hat · OpenShift 4 openshift:4.1::el7 atomic-enterprise-service-catalog-svcat 1:4.1.16-201909090609.git.1.cc4acc1.el7
Red Hat · OpenShift 4 openshift:4.1::el7 jenkins-2-plugins 0:4.1.1567784275-1.el7
Red Hat · OpenShift 4 openshift:4.1::el7 openshift 0:4.1.16-201909090609.git.0.2f97059.el7
Red Hat · OpenShift 4 openshift:4.1::el7 openshift-ansible 0:4.1.16-201909090609.git.162.a0800db.el7
Red Hat · OpenShift 4 openshift:4.1::el7 openshift-clients 0:4.1.16-201909090609.git.0.2f97059.el7
Red Hat · OpenShift 4 openshift:4.1::el7 openshift-clients-redistributable 0:4.1.16-201909090609.git.0.2f97059.el7
Red Hat · OpenShift 4 openshift:4.1::el7 openshift-hyperkube 0:4.1.16-201909090609.git.0.2f97059.el7
Red Hat · OpenShift 4 openshift:4.1::el8 openshift 0:4.1.16-201909090609.git.0.2f97059.el8
Red Hat · OpenShift 4 openshift:4.1::el8 openshift-clients 0:4.1.16-201909090609.git.0.2f97059.el8
Red Hat · OpenShift 4 openshift:4.1::el8 openshift-clients-redistributable 0:4.1.16-201909090609.git.0.2f97059.el8
Red Hat · OpenShift 4 openshift:4.1::el8 openshift-hyperkube 0:4.1.16-201909090609.git.0.2f97059.el8

Vulnerabilities 1

  • Medium 4.8
    CVE-2019-11249

    kubectl cp allows symlink directory traversal

    The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If…

    Kubernetes Kubernetes k3s Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1749938
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_2794.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1737651
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11249
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11249
  • article
    https://groups.google.com/forum/#!topic/kubernetes-security-discuss/Vf31dXp0EJc