Skip to content
OpenAdvisories
Unscored RHSA-2016:1094 3 CVEs

Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-clients 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-clients-redistributable 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-dockerregistry 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-master 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-node 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-pod 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-recycle 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-sdn-ovs 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 atomic-openshift-tests 0:3.2.0.44-1.git.0.a4463d9.el7
Red Hat · OpenShift 3 openshift:3.2::el7 nodejs-node-uuid 0:1.4.7-1.el7
Red Hat · OpenShift 3 openshift:3.2::el7 tuned-profiles-atomic-openshift-node 0:3.2.0.44-1.git.0.a4463d9.el7

Vulnerabilities 3

  • Unscored —
    CVE-2016-3703

    Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is gran…

  • Unscored —
    CVE-2016-3708

    Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normall…

  • Unscored —
    CVE-2016-3738

    Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated use…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1306011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1318974
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1324996
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1329044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1330233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1330364
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1331229
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1333168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1333461
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1094.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-3703
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3703
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3703
  • report
    https://access.redhat.com/security/cve/CVE-2016-3708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3708
  • report
    https://access.redhat.com/security/cve/CVE-2016-3738
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3738
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3738