Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 4 openshift:4.1::el7 | cri-o | 0:1.13.11-0.4.dev.rhaos4.1.git9cb8f2f.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el7 | cri-o-debuginfo | 0:1.13.11-0.4.dev.rhaos4.1.git9cb8f2f.el7 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | cri-o | 0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | cri-o-debuginfo | 0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8 |
| Red Hat · OpenShift 4 openshift:4.1::el8 | cri-o-debugsource | 0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8 |
Vulnerabilities 1
-
Medium 6.4
containers/image library Insufficiently Protects Credentials
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1732508
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2825.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10214
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10214
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10214