Red Hat Security Advisory

RHSA-2019:3007

OpenShift Container Platform 4.1.20 openshift-enterprise-builder-container security update

Released 2019-10-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 openshift4/ose-docker-builder

Fixes 2 records

TI-2019-07534 CVE-2019-10214 · GHSA-85p9-j7c9-v4gr

Insufficiently protected credentials in containers/image

LOW 30

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container regi…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01591 Published 2019-11-25 Partial fix · 3.0.0 CWE-522

TI-2019-07472 CVE-2019-10150 · GHSA-ccwq-5269-25p2

Improper authentication in Red Hat atomic-openshift

LOW 29

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds.

CVSS 3.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.01388 Published 2019-06-12 Partial fix CWE-287