Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3 RPM release advisory
Red Hat OpenShift Container Platform release 4.3.0, which fixes several bugs and includes various enhancements, is now available.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10406US | medium4.8 | — | ||
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resulting in a stored XSS vulnerability exploit… | ||||
| CVE-2019-10405US | medium5.4 | — | ||
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerabilit… | ||||
| CVE-2019-10404US | medium5.4 | — | ||
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users… | ||||
| CVE-2019-10403US | medium5.4 | — | ||
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users… | ||||
| CVE-2019-10402US | medium5.4 | — | ||
In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a stored XSS vulnerability exploitable by users… | ||||
| CVE-2019-10401US | medium5.4 | — | ||
In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability e… | ||||
| CVE-2019-11840US | medium5.9OT elevated | — | ||
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation o… | ||||
references
External citations — patches, advisories, analysis.
remediations (16)
- Fixedjenkins-0:2.204.1.1578490170-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedjenkins-0:2.204.1.1578490170-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedopenshift-0:4.3.0-202001131753.git.0.0aee6a8.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedopenshift-0:4.3.0-202001131753.git.0.0aee6a8.el8.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedopenshift-hyperkube-0:4.3.0-202001131753.git.0.0aee6a8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063 - Fixedopenshift-hyperkube-0:4.3.0-202001131753.git.0.0aee6a8.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied.
https://access.redhat.com/errata/RHBA-2020:0063
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan