Red Hat Security Advisory

RHSA-2018:3551

OpenShift Container Platform 3.8 security update

Released 2018-11-19 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.8 atomic-openshift-3.8.44-1.git.0.9be0abd.el7, atomic-openshift-clients-3.8.44-1.git.0.9be0abd.el7, atomic-openshift-clients-redistributable-3.8.44-1.git.0.9be0abd.el7 +12

Fixes 1 record

TI-2018-16130 CVE-2018-1002105 · GHSA-579h-mv94-g4gp

Improper privilege management in Kubernetes

HIGH 84

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection thr…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.86978 Published 2018-12-05 Partial fix · v1.10.11, v1.11.5 +4 CWE-388