Red Hat Security Advisory: kubernetes security update
Updated kubernetes packages that fix two security issues are now available for Red Hat OpenShift Enterprise 3.0.2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-1906US | critical9.8 | — | ||
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed. | ||||
| CVE-2016-1905US | high7.7 | — | ||
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object. | ||||
references
External citations — patches, advisories, analysis.
remediations (14)
- Fixedopenshift-0:3.0.2.0-0.git.45.423f434.el7ose.src as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-0:3.0.2.0-0.git.45.423f434.el7ose.src as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-clients-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-clients-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-master-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-master-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-node-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-node-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-sdn-ovs-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedopenshift-sdn-ovs-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedtuned-profiles-openshift-node-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351 - Fixedtuned-profiles-openshift-node-0:3.0.2.0-0.git.45.423f434.el7ose.x86_64 as a component of Red Hat OpenShift Enterprise 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:0351
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan