Fixed packages 30
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-enterprise-service-catalog | 1:3.11.248-1.git.1.9aad2ef.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-enterprise-service-catalog-svcat | 1:3.11.248-1.git.1.9aad2ef.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-cluster-autoscaler | 0:3.11.248-1.git.1.b5530f6.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-descheduler | 0:3.11.248-1.git.1.108ef32.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-dockerregistry | 0:3.11.248-1.git.1.bb4a1fc.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-metrics-server | 0:3.11.248-1.git.1.b53e0e3.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-node-problem-detector | 0:3.11.248-1.git.1.628ff22.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-service-idler | 0:3.11.248-1.git.1.4c42a90.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | golang-github-openshift-oauth-proxy | 0:3.11.248-1.git.1.9885abb.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | golang-github-prometheus-alertmanager | 0:3.11.248-1.git.1.66abd18.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | golang-github-prometheus-node_exporter | 0:3.11.248-1.git.1.32f87fc.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | golang-github-prometheus-prometheus | 0:3.11.248-1.git.1.ad54f5b.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | jenkins-2-plugins | 0:3.11.1593081747-1.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-ansible | 0:3.11.248-1.git.0.fd212c7.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-ansible-docs | 0:3.11.248-1.git.0.fd212c7.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-ansible-playbooks | 0:3.11.248-1.git.0.fd212c7.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-ansible-roles | 0:3.11.248-1.git.0.fd212c7.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-ansible-test | 0:3.11.248-1.git.0.fd212c7.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-enterprise-autoheal | 0:3.11.248-1.git.1.0020348.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-enterprise-cluster-capacity | 0:3.11.248-1.git.1.37b107c.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-kuryr | 0:3.11.248-1.git.1.f90c804.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-kuryr-cni | 0:3.11.248-1.git.1.f90c804.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-kuryr-common | 0:3.11.248-1.git.1.f90c804.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | openshift-kuryr-controller | 0:3.11.248-1.git.1.f90c804.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | prometheus | 0:3.11.248-1.git.1.ad54f5b.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | prometheus-alertmanager | 0:3.11.248-1.git.1.66abd18.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | prometheus-node-exporter | 0:3.11.248-1.git.1.32f87fc.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | python-urllib3 | 0:1.24.3-1.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | python2-kuryr-kubernetes | 0:3.11.248-1.git.1.f90c804.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | python2-urllib3 | 0:1.24.3-1.el7 |
Vulnerabilities 2
-
Medium 5.3
Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.
-
Low 3.1
Improper masking of some secrets in Jenkins Credentials Binding Plugin
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1741138
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1746144
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1753649
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1763610
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1773406
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1791837
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1795393
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1807822
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1824243
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1828484
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1841439
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1845676
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1846126
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1847478
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1848492
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1848723
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1856250
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_2990.json
-
report
https://access.redhat.com/security/cve/CVE-2020-2181
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1847341
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2181
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2181
-
article
https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1374
-
report
https://access.redhat.com/security/cve/CVE-2020-2182
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1847348
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-2182
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2182
-
article
https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1835