Skip to content
OpenAdvisories
High RHSA-2021:2499 3 CVEs

Red Hat Security Advisory: OpenShift Container Platform 4.6.36 security update

Published Sep 14, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.6::el8 jenkins 0:2.277.3.1623853726-1.el8

Vulnerabilities 3

  • High 7.0
    CVE-2020-27216

    Local Temp Directory Hijacking Vulnerability

    In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the pr…

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  • Medium 5.2
    CVE-2020-27223 Public exploit EPSS 78%

    DOS vulnerability for Quoted Quality CSV headers

    In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due…

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  • Medium 4.8
    CVE-2020-27218

    Buffer not correctly recycled in Gzip Request inflation

    In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacke…

    The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1891132
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1902826
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1934116
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2499.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-27216
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-27216
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-27216
  • article
    https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6#advisory-comment-63053
  • report
    https://access.redhat.com/security/cve/CVE-2020-27218
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-27218
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-27218
  • article
    https://github.com/eclipse/jetty.project/security/advisories/GHSA-86wm-rrjm-8wh8
  • report
    https://access.redhat.com/security/cve/CVE-2020-27223
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-27223
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-27223
  • article
    https://github.com/eclipse/jetty.project/security/advisories/GHSA-m394-8rww-3jr7