Skip to content
OpenAdvisories
Critical RHSA-2018:3598 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 3.6 security update

Published Sep 29, 2024 · Updated Aug 15, 2026

Ecosystem: Red Hat

Fixed packages 23

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-clients 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-clients-redistributable 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-cluster-capacity 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-docker-excluder 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-dockerregistry 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-excluder 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-federation-services 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-master 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-node 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-pod 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-sdn-ovs 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-service-catalog 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-tests 0:3.6.173.0.140-1.git.0.9686d52.el7
Red Hat · OpenShift 3 openshift:3.6::el7 atomic-openshift-utils 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 openshift-ansible 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 openshift-ansible-callback-plugins 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 openshift-ansible-docs 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 openshift-ansible-filter-plugins 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 openshift-ansible-lookup-plugins 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 openshift-ansible-playbooks 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 openshift-ansible-roles 0:3.6.173.0.140-1.git.0.0ccb19b.el7
Red Hat · OpenShift 3 openshift:3.6::el7 tuned-profiles-atomic-openshift-node 0:3.6.173.0.140-1.git.0.9686d52.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/security/vulnerabilities/3716411
  • article
    https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_6_release_notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1648138
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1650020
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3598.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1002105
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1002105
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1002105
  • article
    https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88