Description
The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 1 | jenkins | 1.498-1.1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | mongodb +3 | 2.0.2-6.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | openshift-console | 0.0.13-2.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | openshift-origin-broker | 1.0.10-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | openshift-origin-broker-util | 1.0.14-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | openshift-origin-cartridge-ruby-1.8 +1 | 1.0.5-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | openshift-origin-node-util | 1.0.7-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | openshift-origin-port-proxy +1 | 1.0.3-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rhc | 1.3.2-1.3.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | ruby193-mod_passenger +5 | 3.0.12-21.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | ruby193-rubygem-activerecord +1 | 1:3.2.8-2.el6 | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rubygem-activerecord | 1:3.0.13-3.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rubygem-openshift-origin-auth-remote-user | 1.0.4-2.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rubygem-openshift-origin-common +2 | 1.0.2-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rubygem-openshift-origin-console +1 | 1.0.6-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rubygem-openshift-origin-controller | 1.0.11-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rubygem-openshift-origin-msg-broker-mcollective | 1.0.4-1.el6op | RHSA-2013:0220 |
| Red Hat OpenShift 1 | rubygem-openshift-origin-node | 1.0.10-6.el6op | RHSA-2013:0220 |
Advisories 1
- RHSA-2013:0220 Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1 update Red Hat Security Advisories (RHSA) · Jun 28, 2026