Red Hat Security Advisory: Red Hat Quay v3.3.3 bug fix and security update
Red Hat Quay v3.3.3 is now available with bug fixes and security updates. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Note: Red Hat Quay v3.3.2 was not released publicly.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-27832US | critical9.0 | — | ||
A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to tr… | ||||
| CVE-2020-27831US | medium4.3 | — | ||
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows a… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2021:0050self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1905758external
- 1905784external
- PROJQUAY-1124external
- Canonical URLself
remediations (18)
- Fixedquay/quay-container-security-rhel8-operator-metadata@sha256:4befaafcec10f6d60d2b3a59479d7b3f88cfce1c80e90a32e54caa0fc86e9b5a_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-container-security-rhel8-operator-metadata@sha256:4befaafcec10f6d60d2b3a59479d7b3f88cfce1c80e90a32e54caa0fc86e9b5a_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-container-security-rhel8-operator@sha256:d775b67203182f3197aa2322ddb36dff835f54e354d19581a4131325aa2143f6_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-container-security-rhel8-operator@sha256:d775b67203182f3197aa2322ddb36dff835f54e354d19581a4131325aa2143f6_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-openshift-bridge-rhel8-operator-metadata@sha256:95dcb9bc5c5500e0d99faf8b8bfab474f49730d6411ab07c5021ddc18f8116f5_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-openshift-bridge-rhel8-operator-metadata@sha256:95dcb9bc5c5500e0d99faf8b8bfab474f49730d6411ab07c5021ddc18f8116f5_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-openshift-bridge-rhel8-operator@sha256:4c5bae8fa66392cb05efde2c5f2ce3364a79c31e3176a5465fe3d33af89b39e4_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-openshift-bridge-rhel8-operator@sha256:4c5bae8fa66392cb05efde2c5f2ce3364a79c31e3176a5465fe3d33af89b39e4_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-operator-bundle@sha256:b497ea18ad6989fff889124a10ca02de4d435d6ec3cdff3f954be18203cae204_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-operator-bundle@sha256:b497ea18ad6989fff889124a10ca02de4d435d6ec3cdff3f954be18203cae204_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-rhel8-operator@sha256:84f200f48320ff0b30afac45c935086d42155a31d9e6c9a219ea4d7de98ab7b4_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Fixedquay/quay-rhel8-operator@sha256:84f200f48320ff0b30afac45c935086d42155a31d9e6c9a219ea4d7de98ab7b4_amd64 as a component of Quay v3
Download the release images via: quay.io/redhat/quay:v3.3.3 quay.io/redhat/clair-jwt:v3.3.3 quay.io/redhat/quay-builder:v3.3.3 quay.io/redhat/clair:v3.3.3
https://access.redhat.com/errata/RHSA-2021:0050 - Workaroundquay/quay-container-security-rhel8-operator-metadata@sha256:4befaafcec10f6d60d2b3a59479d7b3f88cfce1c80e90a32e54caa0fc86e9b5a_amd64 as a component of Quay v3
Disable email using the configuration app.
- Workaroundquay/quay-container-security-rhel8-operator@sha256:d775b67203182f3197aa2322ddb36dff835f54e354d19581a4131325aa2143f6_amd64 as a component of Quay v3
Disable email using the configuration app.
- Workaroundquay/quay-openshift-bridge-rhel8-operator-metadata@sha256:95dcb9bc5c5500e0d99faf8b8bfab474f49730d6411ab07c5021ddc18f8116f5_amd64 as a component of Quay v3
Disable email using the configuration app.
- Workaroundquay/quay-openshift-bridge-rhel8-operator@sha256:4c5bae8fa66392cb05efde2c5f2ce3364a79c31e3176a5465fe3d33af89b39e4_amd64 as a component of Quay v3
Disable email using the configuration app.
- Workaroundquay/quay-operator-bundle@sha256:b497ea18ad6989fff889124a10ca02de4d435d6ec3cdff3f954be18203cae204_amd64 as a component of Quay v3
Disable email using the configuration app.
- Workaroundquay/quay-rhel8-operator@sha256:84f200f48320ff0b30afac45c935086d42155a31d9e6c9a219ea4d7de98ab7b4_amd64 as a component of Quay v3
Disable email using the configuration app.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan