Skip to content
OpenAdvisories
High RHSA-2019:1851 3 CVEs

Red Hat Security Advisory: OpenShift Container Platform 3.11 security update

Published Sep 18, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients-redistributable 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-docker-excluder 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-excluder 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hyperkube 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hypershift 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-master 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-node 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-pod 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-sdn-ovs 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-template-service-broker 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-tests 0:3.11.129-1.git.0.bd4f2d5.el7
Red Hat · OpenShift 3 openshift:3.11::el7 jenkins-2-plugins 0:3.11.1560870549-1.el7

Vulnerabilities 3

  • High 7.5
    CVE-2019-10337

    Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin

    An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets …

    Jenkins Project Jenkins Token Macro Plugin org.jenkins-ci.plugins:token-macro Web / CMS Maven
  • Medium 6.5
    CVE-2019-1002100 EPSS 17%

    Kubernetes DoS Vulnerability

    In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g. `kubectl patch --type json` or `"Content-Type: appli…

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go
  • Medium 5.0
    CVE-2019-3876

    A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation …

    Red Hat web-console

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1683190
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1691107
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1719782
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1851.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-3876
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-3876
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-3876
  • report
    https://access.redhat.com/security/cve/CVE-2019-10337
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10337
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10337
  • article
    https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399
  • report
    https://access.redhat.com/security/cve/CVE-2019-1002100
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-1002100
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-1002100
  • article
    https://groups.google.com/forum/#!topic/kubernetes-announce/vmUUNkYfG9g