Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 4 openshift:4.2::el7 | atomic-enterprise-service-catalog | 1:4.2.20-202002170402.git.1.159e2f5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | atomic-enterprise-service-catalog-svcat | 1:4.2.20-202002170402.git.1.159e2f5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | atomic-openshift-service-idler | 0:4.2.20-202002170402.git.1.43218bc.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | cri-o | 0:1.14.12-19.dev.rhaos4.2.git313d784.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | jenkins | 0:2.204.1.1581951349-1.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | jenkins-2-plugins | 0:4.2.1581952573-1.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift | 0:4.2.20-202002140432.git.0.47933cb.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-ansible | 0:4.2.20-202002140432.git.187.2308b53.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-clients | 0:4.2.20-202002140432.git.1.5dc67c9.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-clients-redistributable | 0:4.2.20-202002140432.git.1.5dc67c9.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-hyperkube | 0:4.2.20-202002140432.git.0.47933cb.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-kuryr | 0:4.2.20-202002140432.git.1.d9a72a5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-kuryr-cni | 0:4.2.20-202002140432.git.1.d9a72a5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-kuryr-common | 0:4.2.20-202002140432.git.1.d9a72a5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | openshift-kuryr-controller | 0:4.2.20-202002140432.git.1.d9a72a5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el7 | python2-kuryr-kubernetes | 0:4.2.20-202002140432.git.1.d9a72a5.el7 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | cri-o | 0:1.14.12-10.dev.rhaos4.2.git313d784.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | cri-o-debuginfo | 0:1.14.12-10.dev.rhaos4.2.git313d784.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | cri-o-debugsource | 0:1.14.12-10.dev.rhaos4.2.git313d784.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | machine-config-daemon | 0:4.2.20-202002170402.git.1.a83336a.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift | 0:4.2.20-202002140432.git.0.47933cb.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift-clients | 0:4.2.20-202002140432.git.1.5dc67c9.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift-clients-redistributable | 0:4.2.20-202002140432.git.1.5dc67c9.el8 |
| Red Hat · OpenShift 4 openshift:4.2::el8 | openshift-hyperkube | 0:4.2.20-202002140432.git.0.47933cb.el8 |
Vulnerabilities 1
-
High 8.8
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1802082
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0522.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10392
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1819704
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10392
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10392
-
article
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1534