Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.5 packages update
Red Hat OpenShift Container Platform release 4.3.5 is now available with updates to packages and images that fix several bugs.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-2105US | medium5.4 | — | ||
REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. | ||||
| CVE-2020-2104US | medium4.3OT erhöht | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart. | ||||
| CVE-2020-2103US | medium5.4 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page. | ||||
| CVE-2020-2102US | medium5.3 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC. | ||||
| CVE-2020-2101US | medium5.3 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to u… | ||||
| CVE-2020-2100US | medium5.8 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848. | ||||
| CVE-2020-2099US | high8.6OT erhöht | — | ||
Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge o… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (14)
- Behobenjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.noarch as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675 - Behobenjenkins-0:2.204.2.1583446818-1.el7.src as a component of Red Hat OpenShift Container Platform 4.3
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHBA-2020:0675
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan