Skip to content
OpenAdvisories
Unscored RHSA-2014:1906 2 CVEs

Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.1.9 security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-enterprise-release 0:2.1.9-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-enterprise-upgrade 0:2.1.9-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-enterprise-upgrade-broker 0:2.1.9-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-enterprise-upgrade-node 0:2.1.9-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-enterprise-yum-validator 0:2.1.9-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-origin-broker 0:1.16.1.14-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-origin-broker-util 0:1.23.8.14-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-origin-cartridge-jbosseap 0:2.16.3.7-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-origin-cartridge-jbossews 0:1.22.3.7-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-origin-msg-node-mcollective 0:1.22.2.3-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 openshift-origin-node-util 0:1.22.20.5-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 rubygem-openshift-origin-controller 0:1.23.10.15-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 rubygem-openshift-origin-frontend-apache-mod-rewrite 0:0.5.2.2-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 rubygem-openshift-origin-frontend-apache-vhost 0:0.5.2.6-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 rubygem-openshift-origin-frontend-apachedb 0:0.4.1.2-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 rubygem-openshift-origin-frontend-haproxy-sni-proxy 0:0.3.2.2-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 rubygem-openshift-origin-msg-broker-mcollective 0:1.23.3.6-1.el6op
Red Hat · OpenShift 2 openshift:2.0::el6 rubygem-openshift-origin-node 0:1.23.9.26-1.el6op

Vulnerabilities 2

  • Unscored —
    CVE-2014-3602

    Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote …

  • Unscored —
    CVE-2014-3674

    Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to ac…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/Technical_Notes/index.html
  • article
    https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html#chap-Asynchronous_Errata_Updates
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131680
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1143991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1148170
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1149837
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1153319
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1155794
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1163502
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1906.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3602
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3602
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3602
  • report
    https://access.redhat.com/security/cve/CVE-2014-3674
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3674
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3674