Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-clients | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-clients-redistributable | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-cluster-capacity | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-docker-excluder | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-excluder | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-federation-services | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-master | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-node | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-pod | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-sdn-ovs | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-service-catalog | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-template-service-broker | 0:3.9.51-1.git.0.dc3a40b.el7 |
| Red Hat · OpenShift 3 openshift:3.9::el7 | atomic-openshift-tests | 0:3.9.51-1.git.0.dc3a40b.el7 |
Vulnerabilities 2
-
Critical 9.8
Privilege Escalation in Kubernetes
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…
-
High 7.7
JSON-Patch Out-of-bounds Write vulnerability
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provid…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
https://access.redhat.com/security/vulnerabilities/3716411
-
article
https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1607150
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1625885
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1626281
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1628371
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1628799
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1629001
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1631087
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1632130
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1633767
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1648138
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2908.json
-
report
https://access.redhat.com/security/cve/CVE-2018-14632
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-14632
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-14632
-
report
https://access.redhat.com/security/cve/CVE-2018-1002105
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-1002105
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1002105
-
article
https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88