Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.5 packages update
Red Hat OpenShift Container Platform release 4.3.5 is now available with updates to packages and images that fix several bugs.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-2105US | medium5.4 | — | ||
REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. | ||||
| CVE-2020-2104US | medium4.3OT elevated | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart. | ||||
| CVE-2020-2103US | medium5.4 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page. | ||||
| CVE-2020-2102US | medium5.3 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC. | ||||
| CVE-2020-2101US | medium5.3 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to u… | ||||
| CVE-2020-2100US | medium5.8 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848. | ||||
| CVE-2020-2099US | high8.6OT elevated | — | ||
Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge o… | ||||
references
External citations — patches, advisories, analysis.
remediations (14)
- Fixedjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Fixedjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan