Skip to content
OpenAdvisories
Critical RHSA-2018:3549 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 3.10 security update

Published Sep 29, 2024 · Updated Aug 15, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-enterprise-service-catalog 1:3.10.72-1.git.1450.7d3f435.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-enterprise-service-catalog-svcat 1:3.10.72-1.git.1450.7d3f435.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-clients 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-clients-redistributable 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-descheduler 0:3.10.72-1.git.299.953c1c8.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-docker-excluder 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-dockerregistry 0:3.10.72-1.git.390.186ec4f.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-excluder 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-hyperkube 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-hypershift 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-master 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-node 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-node-problem-detector 0:3.10.72-1.git.252.fa9e8ae.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-pod 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-sdn-ovs 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-template-service-broker 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-tests 0:3.10.72-1.git.0.3cb2fdc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 atomic-openshift-web-console 0:3.10.72-1.git.395.d23c438.el7
Red Hat · OpenShift 3 openshift:3.10::el7 golang-github-prometheus-node_exporter 0:3.10.72-1.git.1060.64daa26.el7
Red Hat · OpenShift 3 openshift:3.10::el7 openshift-ansible 0:3.10.73-1.git.0.8b65cea.el7
Red Hat · OpenShift 3 openshift:3.10::el7 openshift-ansible-docs 0:3.10.73-1.git.0.8b65cea.el7
Red Hat · OpenShift 3 openshift:3.10::el7 openshift-ansible-playbooks 0:3.10.73-1.git.0.8b65cea.el7
Red Hat · OpenShift 3 openshift:3.10::el7 openshift-ansible-roles 0:3.10.73-1.git.0.8b65cea.el7
Red Hat · OpenShift 3 openshift:3.10::el7 openshift-enterprise-cluster-capacity 0:3.10.72-1.git.380.0fd53e8.el7
Red Hat · OpenShift 3 openshift:3.10::el7 openshift-monitor-project-lifecycle 0:3.10.72-1.git.59.5358725.el7
Red Hat · OpenShift 3 openshift:3.10::el7 openshift-monitor-sample-app 0:3.10.72-1.git.5.de405bc.el7
Red Hat · OpenShift 3 openshift:3.10::el7 prometheus-node-exporter 0:3.10.72-1.git.1060.64daa26.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/security/vulnerabilities/3716411
  • article
    https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1648138
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3549.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1002105
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1002105
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1002105
  • article
    https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88