Red Hat Security Advisory

RHSA-2019:0408

OpenShift Container Platform 3.4, 3.5, 3.6, and 3.7 security update

Released 2019-02-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.4 docker-2:1.12.6-79.git5680db5.el7, docker-client-2:1.12.6-79.git5680db5.el7, docker-common-2:1.12.6-79.git5680db5.el7 +6
Red Hat OpenShift Container Platform 3.5 docker-2:1.12.6-79.git5680db5.el7, docker-client-2:1.12.6-79.git5680db5.el7, docker-common-2:1.12.6-79.git5680db5.el7 +6
Red Hat OpenShift Container Platform 3.6 docker-2:1.12.6-79.git5680db5.el7, docker-client-2:1.12.6-79.git5680db5.el7, docker-common-2:1.12.6-79.git5680db5.el7 +6
Red Hat OpenShift Container Platform 3.7 docker-2:1.12.6-79.git5680db5.el7, docker-client-2:1.12.6-79.git5680db5.el7, docker-common-2:1.12.6-79.git5680db5.el7 +6

Fixes 1 record

TI-2019-04061 CVE-2019-5736 · GHSA-gxmr-w5mj-v8hh

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows…

HIGH 82

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as r…

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.98452 Published 2019-02-11 Partial fix CWE-78