Fixed packages 29
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 4 openshift:4.1::el7 | atomic-enterprise-service-catalog | 1:4.1.37-202003020601.git.0.5784dc4.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | atomic-enterprise-service-catalog-svcat | 1:4.1.37-202003020601.git.0.5784dc4.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | cri-o | 0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | cri-o-debuginfo | 0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | jenkins | 0:2.204.2.1583849753-1.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | jenkins-2-plugins | 0:4.1.1583850385-1.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | openshift | 0:4.1.37-202002280447.git.0.543873e.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | openshift-ansible | 0:4.1.37-202002280447.git.1.bb180eb.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | openshift-clients | 0:4.1.37-202002280447.git.0.543873e.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | openshift-clients-redistributable | 0:4.1.37-202002280447.git.0.543873e.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | openshift-hyperkube | 0:4.1.37-202002280447.git.0.543873e.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | containers-common | 1:0.1.32-6.git1715c90.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | cri-o | 0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | cri-o-debuginfo | 0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | cri-o-debugsource | 0:1.13.12-6.dev.rhaos4.1.git8abaaeb.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | openshift | 0:4.1.37-202002280447.git.0.543873e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | openshift-clients | 0:4.1.37-202002280447.git.0.543873e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | openshift-clients-redistributable | 0:4.1.37-202002280447.git.0.543873e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | openshift-hyperkube | 0:4.1.37-202002280447.git.0.543873e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | podman | 0:1.0.2-3.dev.git96ccc2e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | podman-debuginfo | 0:1.0.2-3.dev.git96ccc2e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | podman-debugsource | 0:1.0.2-3.dev.git96ccc2e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | podman-docker | 0:1.0.2-3.dev.git96ccc2e.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | runc | 0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | runc-debuginfo | 0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | runc-debugsource | 0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | skopeo | 1:0.1.32-6.git1715c90.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | skopeo-debuginfo | 1:0.1.32-6.git1715c90.el8_0 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | skopeo-debugsource | 1:0.1.32-6.git1715c90.el8_0 |
Vulnerabilities 1
-
High 8.8
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1800580
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0690.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10392
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1819704
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10392
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10392
-
article
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1534