Red Hat Security Advisory: OpenShift Container Platform 4.10.41 security update

Fixed packages 1

Vulnerabilities 1

• Medium 4.8
  CVE-2022-36881

  Jenkins Git client plugin 3.11.0 does not perform SSH host key verification

  Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.

  Jenkins Project Jenkins Git client Plugin org.jenkins-ci.plugins:git-client Web / CMS Maven
  Jul 27, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2114755
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7865.json
• report
  https://access.redhat.com/security/cve/CVE-2022-36881
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-36881
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-36881
• advisory
  https://github.com/advisories/GHSA-cm7j-p8hc-97vj
• article
  https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1468