Skip to content
OpenAdvisories
Critical RHSA-2018:3551 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 3.8 security update

Published Sep 29, 2024 · Updated Aug 15, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-clients 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-clients-redistributable 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-cluster-capacity 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-docker-excluder 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-excluder 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-federation-services 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-master 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-node 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-pod 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-sdn-ovs 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-service-catalog 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-template-service-broker 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 atomic-openshift-tests 0:3.8.44-1.git.0.9be0abd.el7
Red Hat · OpenShift 3 openshift:3.8::el7 tuned-profiles-atomic-openshift-node 0:3.8.44-1.git.0.9be0abd.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/security/vulnerabilities/3716411
  • article
    https://access.redhat.com/errata/RHBA-2018:3550
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1648138
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3551.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1002105
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1002105
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1002105
  • article
    https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88