Skip to content
OpenAdvisories
Unscored RHSA-2013:0220 7 CVEs

Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1 update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 34

ReleasePackageFixed in
Red Hat · OpenShift 1 openshift:1::el6 jenkins 0:1.498-1.1.el6op
Red Hat · OpenShift 1 openshift:1::el6 libmongodb 0:2.0.2-6.el6op
Red Hat · OpenShift 1 openshift:1::el6 mongodb 0:2.0.2-6.el6op
Red Hat · OpenShift 1 openshift:1::el6 mongodb-debuginfo 0:2.0.2-6.el6op
Red Hat · OpenShift 1 openshift:1::el6 mongodb-devel 0:2.0.2-6.el6op
Red Hat · OpenShift 1 openshift:1::el6 mongodb-server 0:2.0.2-6.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-console 0:0.0.13-2.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-broker 0:1.0.10-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-broker-util 0:1.0.14-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-cartridge-haproxy-1.4 0:1.0.3-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-cartridge-ruby-1.8 0:1.0.5-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-cartridge-ruby-1.9-scl 0:1.0.5-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-msg-node-mcollective 0:1.0.2-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-node-util 0:1.0.7-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 openshift-origin-port-proxy 0:1.0.3-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 rhc 0:1.3.2-1.3.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-mod_passenger 0:3.0.12-21.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-activerecord 1:3.2.8-2.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-activerecord-doc 1:3.2.8-2.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-passenger 0:3.0.12-21.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-passenger-debuginfo 0:3.0.12-21.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-passenger-devel 0:3.0.12-21.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-passenger-doc 0:3.0.12-21.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-passenger-native 0:3.0.12-21.el6op
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-passenger-native-libs 0:3.0.12-21.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-activerecord 1:3.0.13-3.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-auth-remote-user 0:1.0.4-2.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-common 0:1.0.2-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-console 0:1.0.6-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-console-doc 0:1.0.6-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-controller 0:1.0.11-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-dns-bind 0:1.0.2-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-msg-broker-mcollective 0:1.0.4-1.el6op
Red Hat · OpenShift 1 openshift:1::el6 rubygem-openshift-origin-node 0:1.0.10-6.el6op

Vulnerabilities 7

  • Unscored —
    CVE-2012-5658

    rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensiti…

  • Medium —
    CVE-2012-6072

    Jenkins allows HTTP Injection and Response Splitting

    CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HT…

    org.jenkins-ci.main:jenkins-core Maven
  • Low —
    CVE-2012-6073

    Jenkins affected by Open Redirect Vulnerability

    Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and con…

    org.jenkins-ci.main:jenkins-core Maven
  • Low —
    CVE-2012-6074

    Jenkins allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authenticated users with write access to inje…

    org.jenkins-ci.main:jenkins-core Maven
  • High —
    CVE-2012-6496

    Active Record contains SQL Injection

    SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic…

    rails activerecord Debian RubyGems
  • Low —
    CVE-2013-0158

    Jenkins allows attackers to obtain the master cryptographic key

    Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the …

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2013-0164

    The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local us…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04
  • article
    https://access.redhat.com/knowledge/docs/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=855264
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=864921
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=872415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=873765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=873768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=874511
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=874750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=874751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=874757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=874799
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=874845
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=875657
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876324
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876644
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876939
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877158
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877407
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=883527
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=885587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=885598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=886159
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=888043
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=888056
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=888671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=889062
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=889088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=889095
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=889125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=889649
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=890607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=890608
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=890612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892795