Red Hat Security Advisory

RHSA-2019:2989

OpenShift Container Platform 3.10 atomic-openshift kube-apiserver security update

Released 2019-10-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.10 atomic-openshift-3.10.175-1.git.0.f9f0e81.el7, atomic-openshift-clients-3.10.175-1.git.0.f9f0e81.el7, atomic-openshift-clients-redistributable-3.10.175-1.git.0.f9f0e81.el7 +11

Fixes 2 records

TI-2019-07534 CVE-2019-10214 · GHSA-85p9-j7c9-v4gr

Insufficiently protected credentials in containers/image

LOW 30

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container regi…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01591 Published 2019-11-25 Partial fix · 3.0.0 CWE-522

TI-2019-07472 CVE-2019-10150 · GHSA-ccwq-5269-25p2

Improper authentication in Red Hat atomic-openshift

LOW 29

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds.

CVSS 3.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.01388 Published 2019-06-12 Partial fix CWE-287