Lucene search

RedHatRHSA-2019:3143

HistoryOct 18, 2019 - 1:30 a.m.

(RHSA-2019:3143) Moderate: OpenShift Container Platform 3.11 atomic-openshift security update

2019-10-1801:30:34

access.redhat.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the atomic-openshift RPM package for Red Hat OpenShift Container Platform 3.11.153.

Security Fix(es):

atomic-openshift: OpenShift builds do not verify SSH Host Keys for the Git repository. (CVE-2019-10150)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7ppc64leatomic-openshift-master< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-master-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat7x86_64atomic-openshift-sdn-ovs< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-sdn-ovs-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat7noarchatomic-openshift-docker-excluder< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-docker-excluder-3.11.153-1.git.0.aaf3f71.el7.noarch.rpm
RedHat7ppc64leatomic-openshift-template-service-broker< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-template-service-broker-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat7x86_64atomic-openshift-template-service-broker< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-template-service-broker-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat7ppc64leatomic-openshift-hypershift< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-hypershift-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat7ppc64leatomic-openshift-hyperkube< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-hyperkube-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat7x86_64atomic-openshift-tests< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-tests-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat7x86_64atomic-openshift-hypershift< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-hypershift-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat7ppc64leatomic-openshift-tests< 3.11.153-1.git.0.aaf3f71.el7atomic-openshift-tests-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	ppc64le	atomic-openshift-master	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-master-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat	7	x86_64	atomic-openshift-sdn-ovs	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-sdn-ovs-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat	7	noarch	atomic-openshift-docker-excluder	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-docker-excluder-3.11.153-1.git.0.aaf3f71.el7.noarch.rpm
RedHat	7	ppc64le	atomic-openshift-template-service-broker	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-template-service-broker-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat	7	x86_64	atomic-openshift-template-service-broker	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-template-service-broker-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat	7	ppc64le	atomic-openshift-hypershift	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-hypershift-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat	7	ppc64le	atomic-openshift-hyperkube	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-hyperkube-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm
RedHat	7	x86_64	atomic-openshift-tests	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-tests-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat	7	x86_64	atomic-openshift-hypershift	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-hypershift-3.11.153-1.git.0.aaf3f71.el7.x86_64.rpm
RedHat	7	ppc64le	atomic-openshift-tests	< 3.11.153-1.git.0.aaf3f71.el7	atomic-openshift-tests-3.11.153-1.git.0.aaf3f71.el7.ppc64le.rpm

Rows per page:

1-10 of 231

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Related for RHSA-2019:3143