Red Hat Enhancement Advisory: Red Hat OpenShift Container Platform 3.6 RPM Release Advisory
Red Hat OpenShift Container Platform 3.6, which fixes several bugs and includes various enhancements, is now available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-1000095US | medium6.5 | — | ||
The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumven… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Fixedjenkins-plugin-script-security-0:1.29-1.el7.src as a component of Red Hat OpenShift Container Platform 3.6
Before applying this update, ensure all previously released errata relevant to your system have been applied. For instructions on new installations, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/install/planning.html For instructions on how to properly upgrade existing clusters to OpenShift Container Platform 3.6, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/upgrading/index.html
https://access.redhat.com/errata/RHEA-2017:1716 - Fixedjenkins-plugin-script-security-0:1.29-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6
Before applying this update, ensure all previously released errata relevant to your system have been applied. For instructions on new installations, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/install/planning.html For instructions on how to properly upgrade existing clusters to OpenShift Container Platform 3.6, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/upgrading/index.html
https://access.redhat.com/errata/RHEA-2017:1716
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan