Red Hat Security Advisory

RHSA-2019:3143

OpenShift Container Platform 3.11 atomic-openshift security update

Released 2019-10-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 atomic-openshift-3.11.153-1.git.0.aaf3f71.el7, atomic-openshift-clients-3.11.153-1.git.0.aaf3f71.el7, atomic-openshift-clients-redistributable-3.11.153-1.git.0.aaf3f71.el7 +10

Fixes 1 record

TI-2019-07472 CVE-2019-10150 · GHSA-ccwq-5269-25p2

Improper authentication in Red Hat atomic-openshift

LOW 29

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds.

CVSS 3.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.01388 Published 2019-06-12 Partial fix CWE-287