Red Hat Security AdvisoryRHSA-2016:1853
Red Hat OpenShift Enterprise 3.2 security update and bug fix update
Released 2016-09-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.2 atomic-openshift-3.2.1.15-1.git.0.d84be7f.el7, atomic-openshift-clients-3.2.1.15-1.git.0.d84be7f.el7, atomic-openshift-clients-redistributable-3.2.1.15-1.git.0.d84be7f.el7 +16
Fixes 1 record
Priority MEDIUM 40
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04669 · Published 2016-09-21 · Fixed CWE-19
