Skip to content
OpenAdvisories
Medium RHSA-2019:1633 1 CVE

Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.11 atomic-openshift security update

Published Sep 18, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients-redistributable 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-docker-excluder 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-excluder 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hyperkube 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hypershift 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-master 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-node 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-pod 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-sdn-ovs 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-template-service-broker 0:3.11.117-1.git.0.14e54a3.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-tests 0:3.11.117-1.git.0.14e54a3.el7

Vulnerabilities 1

  • Medium 6.4
    CVE-2019-11246

    kubectl cp allows symlink directory traversal

    The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If…

    Kubernetes Kubernetes

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1721704
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1633.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11246
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11246
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11246
  • article
    https://groups.google.com/forum/#!topic/kubernetes-dev/OxFMDVnqk60