Skip to content
OpenAdvisories
Medium RHSA-2019:4052 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift security update

Published Sep 16, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients-redistributable 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-docker-excluder 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-excluder 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hyperkube 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hypershift 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-master 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-node 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-pod 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-sdn-ovs 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-template-service-broker 0:3.11.157-1.git.0.dfe38da.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-tests 0:3.11.157-1.git.0.dfe38da.el7

Vulnerabilities 1

  • Medium 4.7
    CVE-2019-11250

    Kubernetes client-go logs authorization headers at debug verbosity levels

    The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, which make use of basic …

    Kubernetes Kubernetes kubeflow-access-management k8s.io/kubernetes Debian Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1740434
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4052.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11250
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11250
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11250