Red Hat Security Advisory: OpenShift Container Platform 3.11 security update

Fixed packages 14

Vulnerabilities 3

• Critical 9.8
  CVE-2018-1002105 Public exploit EPSS 87%

  Privilege Escalation in Kubernetes

  In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

  Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go
  Dec 5, 2018
• Unscored —
  CVE-2018-12115

  In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js unde…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Aug 21, 2018
• Unscored —
  CVE-2018-3830

  Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could…

  Elastic Kibana
  Sep 19, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://access.redhat.com/security/vulnerabilities/3716411
• article
  https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552304
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1613722
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1614904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1615884
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1620219
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1622822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1625090
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1626228
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1626538
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1627086
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1627689
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628235
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628381
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628902
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1629558
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632450
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632648
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632895
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633574
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633923
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1634700
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1634835
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636248
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1637413
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1637737
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641245
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641321
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1641796
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643301
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643948