Red Hat Security Advisory

RHSA-2019:3942

OpenShift Container Platform 4.1.24 openshift security update

Released 2019-11-21 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 openshift-4.1.24-201911080309.git.0.c41acf2.el7, openshift-4.1.24-201911080309.git.0.c41acf2.el8, openshift-clients-4.1.24-201911080309.git.0.c41acf2.el7 +5

Fixes 1 record

TI-2019-08414 CVE-2019-11244 · GHSA-2575-pghm-6qqx

kubectl creates world-writeable cached schema files

LOW 23

In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-).

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00498 Published 2019-04-22 Partial fix · 1.12.9 CWE-524