Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.10 security and bug fix update

Fixed packages 16

Vulnerabilities 2

• High 7.7
  CVE-2018-14632

  JSON-Patch Out-of-bounds Write vulnerability

  An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provid…

  Red Hat atomic-openshift github.com/evanphx/json-patch golang-github-evanphx-json-patch Ubuntu Go
  Sep 6, 2018
• High 7.5
  CVE-2018-14645

  A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read ac…

  [UNKNOWN] haproxy haproxy haproxy Debian Ubuntu
  Sep 21, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1577955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1578482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1594187
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608476
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1609019
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1609703
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1614414
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1615327
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1619886
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623602
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1625885
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1625911
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1626054
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1626552
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1627764
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628405
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628546
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628798
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628964
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1629579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631449
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632361
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632418
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632862
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632863
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632865
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1638519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1638521
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1638525
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1638899
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642052
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2709.json
• report
  https://access.redhat.com/security/cve/CVE-2018-14632
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14632
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14632
• report
  https://access.redhat.com/security/cve/CVE-2018-14645