Red Hat Security Advisory

RHSA-2019:3266

OpenShift Container Platform 4.1 openshift security update

Released 2019-10-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 openshift-4.1.21-201910220952.git.0.493dbf6.el7, openshift-4.1.21-201910220952.git.0.493dbf6.el8, openshift-clients-4.1.21-201910220952.git.0.493dbf6.el7 +5

Fixes 1 record

TI-2019-08421 CVE-2019-11251 · GHSA-6qfg-8799-r575

kubectl cp allows symlink directory traversal

LOW 31

The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of th…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.0262 Published 2020-02-03 Partial fix · 1.13.11, 1.14.7 +2 CWE-61