Skip to content
OpenAdvisories
Medium RHBA-2019:2816 2 CVEs

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update

Published Sep 16, 2024 · Updated Feb 21, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 ansible-service-broker 1:1.3.23-2.el7
Red Hat · OpenShift 3 openshift:3.11::el7 ansible-service-broker-container-scripts 1:1.3.23-2.el7
Red Hat · OpenShift 3 openshift:3.11::el7 ansible-service-broker-selinux 1:1.3.23-2.el7
Red Hat · OpenShift 3 openshift:3.11::el7 automation-broker-apb-role 1:1.3.23-2.el7

Vulnerabilities 2

  • Medium 5.0
    CVE-2019-11247

    Kubernetes kube-apiserver allows access to custom resources via wrong scope

    The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the…

    Kubernetes Kubernetes kubernetes k3s Debian Alpine Go
  • Medium 4.8
    CVE-2019-11249

    kubectl cp allows symlink directory traversal

    The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If…

    Kubernetes Kubernetes k3s Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1432875
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1641647
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1661447
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1703777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1720172
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1733327
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1733429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1734009
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1735502
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1741477
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1743950
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1746212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1748982
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1749024
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1749341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1752853
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_2816.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11247
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732192
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11247
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11247
  • article
    https://groups.google.com/forum/#!topic/kubernetes-security-discuss/Vf31dXp0EJc
  • report
    https://access.redhat.com/security/cve/CVE-2019-11249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1737651
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11249
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11249