Red Hat Security Advisory: OpenShift Container Platform 4.1 openshift security update

Fixed packages 8

Vulnerabilities 2

• Medium 4.8
  CVE-2017-18367

  Improper Input Validation in libseccomp-golang

  libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by spec…

  golang-github-seccomp-libseccomp-golang github.com/seccomp/libseccomp-golang golang-github-seccomp-libseccomp-golang Debian Ubuntu Go
  Apr 24, 2019
• Medium 4.7
  CVE-2019-11250

  Kubernetes client-go logs authorization headers at debug verbosity levels

  The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, which make use of basic …

  Kubernetes Kubernetes kubeflow-access-management k8s.io/kubernetes Debian Wolfi Go
  Aug 29, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1706826
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1740434
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4087.json
• report
  https://access.redhat.com/security/cve/CVE-2017-18367
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-18367
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-18367
• report
  https://access.redhat.com/security/cve/CVE-2019-11250
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11250
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11250