Red Hat Security Advisory: OpenShift Container Platform 3.6 security and bug fix update

Fixed packages 15

Vulnerabilities 1

• High 7.7
  CVE-2018-14632

  JSON-Patch Out-of-bounds Write vulnerability

  An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provid…

  Red Hat atomic-openshift github.com/evanphx/json-patch golang-github-evanphx-json-patch Ubuntu Go
  Sep 6, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1507119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1509859
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1550680
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1625885
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2654.json
• report
  https://access.redhat.com/security/cve/CVE-2018-14632
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14632
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14632