First published: Thu Nov 07 2019(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>This advisory contains the cri-o RPM package for Red Hat OpenShift Container<br>Platform 3.9.102.<br>Security Fix(es):<br><li> containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure (CVE-2019-10214)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/cri-o | <1.9.16-5.git858756d.el7 | 1.9.16-5.git858756d.el7 |
redhat/cri-o | <1.9.16-5.git858756d.el7 | 1.9.16-5.git858756d.el7 |
redhat/cri-o-debuginfo | <1.9.16-5.git858756d.el7 | 1.9.16-5.git858756d.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.