First published: Thu Aug 15 2019(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> kubernetes: API server allows access to cluster-scoped custom resources as if resources were namespaced (CVE-2019-11247)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/openshift | <4.1.10-201908060758.git.0.d81afa6.el8 | 4.1.10-201908060758.git.0.d81afa6.el8 |
redhat/openshift-clients | <4.1.10-201908060758.git.0.d81afa6.el8 | 4.1.10-201908060758.git.0.d81afa6.el8 |
redhat/openshift-clients-redistributable | <4.1.10-201908060758.git.0.d81afa6.el8 | 4.1.10-201908060758.git.0.d81afa6.el8 |
redhat/openshift-hyperkube | <4.1.10-201908060758.git.0.d81afa6.el8 | 4.1.10-201908060758.git.0.d81afa6.el8 |
redhat/openshift | <4.1.10-201908060758.git.0.d81afa6.el7 | 4.1.10-201908060758.git.0.d81afa6.el7 |
redhat/openshift-clients | <4.1.10-201908060758.git.0.d81afa6.el7 | 4.1.10-201908060758.git.0.d81afa6.el7 |
redhat/openshift-clients-redistributable | <4.1.10-201908060758.git.0.d81afa6.el7 | 4.1.10-201908060758.git.0.d81afa6.el7 |
redhat/openshift-hyperkube | <4.1.10-201908060758.git.0.d81afa6.el7 | 4.1.10-201908060758.git.0.d81afa6.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2019:2504 is classified as moderate.
To fix RHSA-2019:2504, update your OpenShift Container Platform to version 4.1.10-201908060758.git.0.d81afa6.el8 or newer.
RHSA-2019:2504 affects the Red Hat OpenShift Container Platform, including the openshift and openshift-clients packages.
There are currently no publicly known exploits associated with RHSA-2019:2504.
RHSA-2019:2504 was released on August 6, 2019.