Red Hat Security Advisory

RHSA-2019:4087

OpenShift Container Platform 4.1 openshift security update

Released 2019-12-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 openshift-4.1.27-201912021146.git.0.a40116f.el7, openshift-4.1.27-201912021146.git.0.a40116f.el8_0, openshift-clients-4.1.27-201912021146.git.0.a40116f.el7 +5

TI-2017-13540 CVE-2017-18367 · GHSA-58v3-j75h-xr49

LOW 37

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0243 Published 2019-04-24 Partial fix · 0.9.1 CWE-20

TI-2019-08420 CVE-2019-11250 · GHSA-jmrx-5g74-6v2f

LOW 32

The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01766 Published 2019-08-29 Partial fix · 1.16, 0.17.0 +1 CWE-532