Red Hat Security Advisory

RHSA-2016:1852

Red Hat OpenShift Enterprise 3.1 security update

Released 2016-09-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Enterprise 3.1 atomic-openshift-3.1.1.7-1.git.0.65f396b.el7aos, atomic-openshift-clients-3.1.1.7-1.git.0.65f396b.el7aos, atomic-openshift-clients-redistributable-3.1.1.7-1.git.0.65f396b.el7aos +7

Fixes 1 record

TI-2016-04694 CVE-2016-5418 · GHSA-88p3-99rj-qvrx

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries…

MEDIUM 40

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04669 Published 2016-09-21 Fixed CWE-19