Red Hat Security Advisory: OpenShift Container Platform 4.3.38 jenkins and openshift security update

Fixed packages 3

Vulnerabilities 9

• Critical 9.4
  CVE-2019-17638 Public exploit EPSS 11%

  Operation on a Resource after Expiration or Release in Jetty Server

  In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the Byte…

  The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Maven
  Jul 9, 2020
• High 8.0
  CVE-2020-2220

  Stored XSS vulnerability in Jenkins job build time trend

  Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven
  Jul 15, 2020
• High 8.0
  CVE-2020-2221

  Stored XSS vulnerability in Jenkins upstream cause

  Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting vulnerability.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven
  Jul 15, 2020
• High 8.0
  CVE-2020-2222

  Stored XSS vulnerability in Jenkins 'keep forever' badge icon

  Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting in a stored cross-site scripting vulnerability.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven
  Jul 15, 2020
• High 8.0
  CVE-2020-2223

  Stored XSS vulnerability in Jenkins console links

  Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console page, resulting in a stored cross-site scripting vulnerability.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven
  Jul 15, 2020
• High 8.0
  CVE-2020-2229 Public exploit

  Jenkins Cross-Site Scripting vulnerability in help icons

  Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Aug 12, 2020
• High 8.0
  CVE-2020-2230 Public exploit EPSS 83%

  Jenkins Cross-site Scripting vulnerability in project naming strategy

  Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Aug 12, 2020
• Medium 5.5
  CVE-2020-8557

  Kubernetes node disk Denial of Service by writing to container /etc/hosts

  The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction m…

  Kubernetes Kubernetes kubernetes k8s.io/kubernetes Debian Alpine Go
  Jul 23, 2020
• Medium 5.4
  CVE-2020-2231 Public exploit

  Improper Neutralization of Input During Web Page Generation in Jenkins

  Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission…

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Aug 12, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835977
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857425
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857427
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857431
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857433
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3808.json
• report
  https://access.redhat.com/security/cve/CVE-2019-17638
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1864680
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-17638
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-17638
• article
  https://bugs.eclipse.org/bugs/show_bug.cgi?id=564984
• article
  https://www.jenkins.io/security/advisory/2020-08-17/
• report
  https://access.redhat.com/security/cve/CVE-2020-2220
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2220
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2220
• report
  https://access.redhat.com/security/cve/CVE-2020-2221
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2221
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2221
• report
  https://access.redhat.com/security/cve/CVE-2020-2222
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2222
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2222
• report
  https://access.redhat.com/security/cve/CVE-2020-2223
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2223
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2223
• report
  https://access.redhat.com/security/cve/CVE-2020-2229
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1874830
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2229
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2229
• article
  https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1955
• report
  https://access.redhat.com/security/cve/CVE-2020-2230
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1875232
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2230
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2230
• article
  https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1957
• report
  https://access.redhat.com/security/cve/CVE-2020-2231
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1875234
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2231
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2231