Description
A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | OpenShift | all | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 3 | ansible +1 | 2.3.2.0-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | ansible-asb-modules | 0.0.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | ansible-kubernetes-modules | 0.3.1-6.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | ansible-service-broker +2 | 1.0.19-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | apb +1 | 1.0.4-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | apb-base-scripts | 1.0.5-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | atomic-openshift +11 | 3.4.1.44.38-1.git.0.d04b8d5.el7 | RHSA-2017:3389, RHSA-2017:3188 |
| Red Hat OpenShift 3 | atomic-openshift-descheduler | 0.3.0-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | atomic-openshift-node-problem-detector | 3.7.0-0.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | atomic-openshift-service-catalog +2 | 3.6.173.0.63-1.git.0.855ea8b.el7 | RHSA-2017:3389, RHSA-2017:3188 |
| Red Hat OpenShift 3 | atomic-openshift-template-service-broker | 3.7.9-1.git.0.7c71a2d.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | cockpit +1 | 155-1.el7 | RHSA-2017:3389, RHSA-2017:3188 |
| Red Hat OpenShift 3 | containernetworking-plugins | 0.5.2-4.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | cri-o | 1.0.4-2.git4aceede.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | dumb-init | 1.1.3-11.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | elastic-curator | 3.5.0-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | elasticsearch | 2.4.4-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | elasticsearch-cloud-kubernetes | 2.4.4.01_redhat_1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | fb303 +6 | 0.9.1-14.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | fluentd +1 | 0.12.39-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | golang-github-openshift-oauth-proxy | 2.1-1.git885c9f40.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | golang-github-openshift-prometheus-alert-buffer | 0-1.gitceca8c1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | hawkular-openshift-agent | 1.2.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | heapster | 1.3.0-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | http-parser +1 | 2.7.1-4.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | image-inspector | 2.1.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins | 2.73.3-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-1 | 1.651.2-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-2-plugins | 3.7.1510081324-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-ace-editor | 1.1-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-authentication-tokens | 1.3-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-blueocean | 1.1.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-blueocean-autofavorite | 0.7-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-blueocean-display-url | 2.0-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-blueocean-jwt +12 | 1.0.1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-blueocean-pipeline-editor | 0.2.0-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-branch-api | 2.0.9-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-cloudbees-folder | 6.0.4-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-credentials | 2.1.13-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-display-url-api | 2.0-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-docker-commons | 1.6-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-docker-workflow +1 | 1.11-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-durable-task +1 | 1.13-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-favorite | 2.0.4-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-git | 3.3.0-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-git-client | 2.4.5-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-git-server | 1.7-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-github | 1.27.0-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-github-api | 1.85-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-github-branch-source | 2.0.5-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-icon-shim | 2.0.3-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-jackson2-api | 2.7.3-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-jquery-detached | 1.2.1-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-junit +1 | 1.20-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-kubernetes | 0.11-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-mapdb-api | 1.0.9.0-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-matrix-auth | 1.5-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-matrix-project | 1.10-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-mercurial | 1.59-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-metrics | 3.1.2.9-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-momentjs +1 | 1.1.1-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-multiple-scms | 0.6-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-openshift-client | 0.9.6-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-openshift-login | 0.12-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-openshift-pipeline | 1.0.47-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-openshift-sync | 0.1.24-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-build-step +1 | 2.1-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-graph-analysis | 1.3-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-input-step | 2.7-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-milestone-step | 1.3.1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-model-api +3 | 1.1.4-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-rest-api +1 | 2.6-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-stage-step | 2.2-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pipeline-utility-steps | 1.3.0-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-plain-credentials +1 | 1.4-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-pubsub-light | 1.8-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-scm-api | 2.1.1-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-script-security | 1.29-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-sse-gateway | 1.15-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-structs | 1.6-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-subversion | 2.7.2-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-token-macro | 2.1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-variant | 1.1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-api | 2.13-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-cps | 2.30-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-cps-global-lib | 2.8-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-durable-task-step | 2.11-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-job | 2.10-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-scm-step +1 | 2.4-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-step-api | 2.9-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | jenkins-plugin-workflow-support +1 | 2.14-10.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | kibana | 4.6.4-3.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | libuv +2 | 1:1.7.5-3.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | mediawiki-apb-role | 1.0.7-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | mediawiki-container-scripts | 1.0.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | mediawiki123 +1 | 1.23.13-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | mysql-apb-role +1 | 1.0.10-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs +2 | 4.7.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-abbrev | 1.0.7-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-accepts | 1.3.3-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-align-text | 0.1.3-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-amdefine | 0.0.4-5.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-asap | 2.0.3-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-asn1 | 0.1.11-4.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-async | 1.4.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-aws-sign2 +1 | 0.5.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-base64url | 1.0.4-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-bl | 1.0.0-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-bluebird | 2.10.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-body-parser | 1.14.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-boom | 2.8.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-bytes +1 | 2.1.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-camelcase | 1.2.1-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-caseless +1 | 0.11.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-chalk +1 | 1.1.1-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-client-sessions | 0.7.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-cliui +1 | 2.1.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-coffee-script | 1.10.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-colors | 1.1.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-combined-stream | 1.0.5-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-commander | 2.8.1-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-concat-stream | 1.4.7-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-cookie | 0.2.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-cryptiles | 2.0.5-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-ctype | 0.5.3-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-dateformat +1 | 1.0.6-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-debug | 2.2.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-depd +1 | 1.1.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-destroy +6 | 1.0.3-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-errno +1 | 0.1.4-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-esprima | 2.7.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-etag | 1.7.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-eventemitter2 | 0.4.14-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-exit +2 | 0.1.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-express | 4.13.3-4.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-extend | 3.0.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-finalhandler | 0.4.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-findup-sync | 0.3.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-forever-agent | 0.6.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-form-data | 1.0.0-rc3.1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-forwarded +2 | 0.1.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-fresh +1 | 0.3.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-generate-object-property | 1.2.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-glob | 5.0.15-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-graceful-fs | 4.1.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-grunt | 0.4.5-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-grunt-cli | 0.1.13-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-grunt-contrib-clean | 0.7.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-grunt-contrib-copy | 0.8.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-grunt-legacy-log | 0.1.2-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-grunt-legacy-log-utils | 0.1.1-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-grunt-legacy-util | 0.2.0-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-har-validator | 1.8.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-has-ansi +3 | 2.0.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-has-color | 0.1.7-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-hawk +1 | 3.1.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-hoek | 2.14.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-hooker +1 | 0.2.3-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-http-errors | 1.3.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-http-proxy | 1.11.2-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-iconv-lite | 0.4.13-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-image-size | 0.4.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-inflight | 1.0.4-6.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-inherits | 2.0.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-is-buffer +3 | 1.0.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-is-my-json-valid | 2.12.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-is-relative +1 | 0.2.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-is-unc-path +3 | 0.1.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-isarray +1 | 0.0.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-js-yaml | 3.4.3-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-json-stringify-safe | 5.0.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-keygrip +2 | 1.0.1-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-kind-of | 3.0.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-lcid +10 | 1.0.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-less | 2.5.3-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-lodash | 3.10.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-lru-cache | 4.0.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-meow | 2.0.0-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-methods +3 | 1.1.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-mime | 1.3.4-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-mime-db | 1.23.0-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-mime-types | 2.1.11-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-minimatch | 3.0.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-mkdirp +1 | 0.5.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-morgan | 1.6.1-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-ms | 0.7.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-negotiator +1 | 0.6.1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-node-uuid | 1.4.7-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-nopt | 3.0.4-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-number-is-nan +1 | 1.0.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-oauth | 0.9.13-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-oauth-sign | 0.8.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-object-assign | 4.0.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-on-finished | 2.3.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-once | 1.3.2-5.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-openshift-auth-proxy | 0.1.1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-os-locale | 1.4.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-packaging | 7-5.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-parse-duration | 0.1.1-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-parseurl | 1.3.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-passport | 0.2.2-4.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-passport-oauth2 | 1.1.2-4.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-passport-strategy | 1.0.0-4.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-path-to-regexp | 1.2.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-patternfly | 2.2.0-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-pause | 0.0.1-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-promise | 7.1.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-proxy-addr | 1.0.8-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-prr +7 | 1.0.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-pseudomap | 1.0.2-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-qs | 5.2.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-raw-body | 2.1.4-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-readable-stream | 2.0.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-repeat-string | 1.5.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-repeating | 2.0.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-request | 2.61.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-resolve | 1.1.6-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-right-align | 0.1.3-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-rimraf | 2.4.4-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-send | 0.13.0-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-serve-static | 1.10.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-sntp | 1.0.9-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-source-map | 0.1.33-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-statuses | 1.2.1-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-string_decoder | 0.10.31-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-stringstream | 0.0.4-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-strip-ansi | 3.0.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-supports-color | 3.1.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-tough-cookie | 2.3.1-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-tunnel-agent | 0.4.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-type-is | 1.6.9-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-typedarray | 0.0.6-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-uid2 | 0.0.3-3.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-underscore-dot-string | 3.2.2-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-url-join +1 | 0.0.1-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-which +1 | 1.2.0-2.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-wrappy | 1.0.1-4.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-xtend | 4.0.0-4.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-yallist | 2.0.0-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | nodejs-yargs | 3.24.0-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | openshift-ansible +7 | 3.7.9-1.git.4.d445616.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | openshift-elasticsearch-plugin | 2.4.1.11__redhat_1-3.el7 | RHSA-2017:3389, RHSA-2017:3188 |
| Red Hat OpenShift 3 | openshift-eventrouter | 0.1-1.git5bd9251.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | openshift-external-storage +4 | 0.0.1-5.git78d6339.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | perl-IO-String | 1.08-20.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | postgresql-apb-role | 1.0.14-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | prometheus +1 | 2.0.0-1.git0a74f98.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | prometheus-alertmanager +1 | 0.9.1-2.git9f5f4b2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | prometheus-node_exporter +1 | 0.15.1-1.gitba5da2c.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | prometheus-promu +1 | 0-1.git85ceabc.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-boto | 2.34.0-5.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-cachetools | 1.0.3-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-certifi | 2016.9.26-2.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-click | 4.1-3.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-crontab | 2.0.2-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-crypto | 2.6.1-1.el7aos | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-docker | 2.4.2-1.3.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-elasticsearch | 2.3.0-1.el7 | RHSA-2017:3188 |
| Red Hat OpenShift 3 | python-google-auth +1 | 1.1.1-1.el7 | RHSA-2017:3188 |
Advisories 2
- RHSA-2017:3389 Red Hat Security Advisory: Red Hat OpenShift Enterprise security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2017:3188 Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.7 security, bug, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
References
- RHSA-2017:3188 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12195
- RHSA-2017:3389 vendor-advisory