Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift-web-console security update

Fixed packages 1

Vulnerabilities 1

• High 8.8
  CVE-2019-0542

  xterm vulnerable to remote code execution

  A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.

  https://xtermjs.org/ xterm.js xterm node-xterm Debian npm
  Jan 9, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668531
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1422.json
• report
  https://access.redhat.com/security/cve/CVE-2019-0542
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0542
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0542