Skip to content
OpenAdvisories
Critical RHSA-2018:2013 3 CVEs

Red Hat Security Advisory: OpenShift Container Platform 3.9 security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-clients 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-clients-redistributable 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-cluster-capacity 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-descheduler 0:3.9.13-1.git.267.bb59a3f.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-docker-excluder 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-dockerregistry 0:3.9.31-1.git.351.1bd46ed.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-excluder 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-federation-services 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-master 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-node 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-node-problem-detector 0:3.9.13-1.git.167.5d6b0d4.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-pod 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-sdn-ovs 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-service-catalog 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-template-service-broker 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-tests 0:3.9.31-1.git.0.ef9737b.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-utils 0:3.9.31-1.git.34.154617d.el7
Red Hat · OpenShift 3 openshift:3.9::el7 atomic-openshift-web-console 0:3.9.31-1.git.246.bded6a4.el7
Red Hat · OpenShift 3 openshift:3.9::el7 golang-github-prometheus-node_exporter 0:3.9.31-1.git.890.a55de06.el7
Red Hat · OpenShift 3 openshift:3.9::el7 mysql-apb-role 0:1.1.11-1.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible 0:3.9.31-1.git.34.154617d.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible-docs 0:3.9.31-1.git.34.154617d.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible-playbooks 0:3.9.31-1.git.34.154617d.el7
Red Hat · OpenShift 3 openshift:3.9::el7 openshift-ansible-roles 0:3.9.31-1.git.34.154617d.el7
Red Hat · OpenShift 3 openshift:3.9::el7 prometheus-node-exporter 0:3.9.31-1.git.890.a55de06.el7

Vulnerabilities 3

  • Critical 9.0
    CVE-2018-1085

    openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certifica…

    [UNKNOWN] openshift-ansible
  • High 8.5
    CVE-2018-10843

    source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9…

    [UNKNOWN] source-to-image
  • Medium 6.5
    CVE-2018-1070

    routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which …

    [UNKNOWN] routing

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466390
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1498398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1506175
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1507429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1512042
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1525642
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1529575
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1531096
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1534311
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1534894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1537872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1538215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1539252
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1539310
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1539529
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1539757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1540819
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1541212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1541350
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1542387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1542460
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1546097
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1546324
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1546936
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1548677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549060
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549454
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550193
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550316
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550385
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550591
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1553012
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1553035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1553294
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1554141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1554145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1554239