Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 4 openshift:4.2::el7 | atomic-enterprise-service-catalog | 1:4.2.4-201911041319.git.1.1de4bcd.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | atomic-enterprise-service-catalog-svcat | 1:4.2.4-201911041319.git.1.1de4bcd.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | atomic-openshift-service-idler | 0:4.2.4-201911041319.git.1.4131c2f.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift | 0:4.2.4-201911041319.git.0.c7d2111.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-clients | 0:4.2.4-201911010432.git.1.30c33a5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-clients-redistributable | 0:4.2.4-201911010432.git.1.30c33a5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-enterprise-autoheal | 0:4.2.4-201911010432.git.1.0b5cd44.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-hyperkube | 0:4.2.4-201911041319.git.0.c7d2111.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift | 0:4.2.4-201911041319.git.0.c7d2111.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift-clients | 0:4.2.4-201911010432.git.1.30c33a5.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift-clients-redistributable | 0:4.2.4-201911010432.git.1.30c33a5.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift-hyperkube | 0:4.2.4-201911041319.git.0.c7d2111.el8 |
Vulnerabilities 1
-
Unscored —
Request smuggling due to accepting invalid headers in net/http via net/textproto
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1765304
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_3304.json
-
report
https://access.redhat.com/security/cve/CVE-2019-16276
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1755969
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-16276
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16276
-
article
https://groups.google.com/forum/#!msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ