Red Hat Security Advisory

RHSA-2019:3916

OpenShift Container Platform 4.2.5 machine-os-content-container security update

Released 2019-11-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4

Fixes 2 records

TI-2019-10640 CVE-2019-14287 · GHSA-33h3-qhjg-4qmf

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass…

HIGH 74

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.63764 Published 2019-10-17 Fixed CWE-755

TI-2018-08751 CVE-2018-12207 · GHSA-mgp4-7j8w-x48q

Improper input validation in 2019.2 IPU – Intel Processor Machine Check Error

LOW 31

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local acces…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00915 Published 2019-11-14 Partial fix CWE-20