Red Hat Enhancement Advisory: Red Hat OpenShift Container Platform 3.6 RPM Release Advisory
Red Hat OpenShift Container Platform 3.6, which fixes several bugs and includes various enhancements, is now available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-1000095US | medium6.5 | — | ||
The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumven… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Behobenjenkins-plugin-script-security-0:1.29-1.el7.src as a component of Red Hat OpenShift Container Platform 3.6
Before applying this update, ensure all previously released errata relevant to your system have been applied. For instructions on new installations, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/install/planning.html For instructions on how to properly upgrade existing clusters to OpenShift Container Platform 3.6, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/upgrading/index.html
https://access.redhat.com/errata/RHEA-2017:1716 - Behobenjenkins-plugin-script-security-0:1.29-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6
Before applying this update, ensure all previously released errata relevant to your system have been applied. For instructions on new installations, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/install/planning.html For instructions on how to properly upgrade existing clusters to OpenShift Container Platform 3.6, see the following documentation: https://docs.openshift.com/container-platform/3.6/install_config/upgrading/index.html
https://access.redhat.com/errata/RHEA-2017:1716
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan