Skip to content
OpenAdvisories
Critical RHSA-2018:3752 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 3.4 security update

Published Sep 29, 2024 · Updated Aug 15, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-clients 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-clients-redistributable 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-docker-excluder 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-dockerregistry 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-excluder 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-master 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-node 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-pod 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-sdn-ovs 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-tests 0:3.4.1.44.57-1.git.0.a631031.el7
Red Hat · OpenShift 3 openshift:3.4::el7 atomic-openshift-utils 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-callback-plugins 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-docs 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-filter-plugins 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-lookup-plugins 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-playbooks 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 openshift-ansible-roles 0:3.4.172-1.git.0.33fe526.el7
Red Hat · OpenShift 3 openshift:3.4::el7 tuned-profiles-atomic-openshift-node 0:3.4.1.44.57-1.git.0.a631031.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/errata/RHBA-2018:0114
  • article
    https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1648138
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3752.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1002105
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1002105
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1002105
  • article
    https://access.redhat.com/security/vulnerabilities/3716411
  • article
    https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88