Headline

RHSA-2022:0555: Red Hat Security Advisory: OpenShift Container Platform 3.11.634 security update

Red Hat OpenShift Container Platform release 3.11.634 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-20612: jenkins: no POST request is required for the endpoint handling manual build requests which could result in CSRF
CVE-2022-20617: jenkins-2-plugins/docker-commons: does not sanitize the name of an image or a tag which could result in an OS command execution

2 years ago

Red Hat Security Data

Open in Source

#csrf #vulnerability #web #red_hat #redis #git #kubernetes

Synopsis

Important: OpenShift Container Platform 3.11.634 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Red Hat OpenShift Container Platform release 3.11.634 is now available with
updates to packages and images that fix several bugs and add enhancements.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

Security Fix(es):

jenkins-2-plugins/docker-commons: does not sanitize the name of an image

or a tag which could result in an OS command execution (CVE-2022-20617)

jenkins: no POST request is required for the endpoint handling manual

build requests which could result in CSRF (CVE-2022-20612)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Affected Products

Red Hat OpenShift Container Platform 3.11 x86_64
Red Hat OpenShift Container Platform for Power 3.11 ppc64le

Fixes

BZ - 1636993 - Need to update openshift-ansible for ose-efs-provisioner
BZ - 2041983 - 3.11 Travis Builds are failing with dependency issues
BZ - 2044460 - CVE-2022-20612 jenkins: no POST request is required for the endpoint handling manual build requests which could result in CSRF
BZ - 2044502 - CVE-2022-20617 jenkins-2-plugins/docker-commons: does not sanitize the name of an image or a tag which could result in an OS command execution

Red Hat OpenShift Container Platform 3.11

SRPM

atomic-enterprise-service-catalog-3.11.634-1.g2e6be86.el7.src.rpm

SHA-256: 73c216e08d11bd04ec7e77781bd9fe7a2eb358389391df76fba3bec3baa9d1c5

atomic-openshift-3.11.634-1.git.0.9b5be6d.el7.src.rpm

SHA-256: cec72d7bdebee4e85bc371c61b39802fcb1c52abf77df2c08b4a68578d5a8425

atomic-openshift-cluster-autoscaler-3.11.634-1.g99b2acf.el7.src.rpm

SHA-256: e1e91e16ee00bbb3f0f33aae53dfc7d55852fc728bd2a843eb7ffa6fc38a5d28

atomic-openshift-descheduler-3.11.634-1.gd435537.el7.src.rpm

SHA-256: df5fdad30193963f570727b94c66150e4529b0c9b72dbf6fac778e5f4da5b2ac

atomic-openshift-dockerregistry-3.11.634-1.g3571208.el7.src.rpm

SHA-256: 86b8d0836e6fe22e59356b68eb46d1e4ffc455f7ce27a98dde80ae7f40190821

atomic-openshift-metrics-server-3.11.634-1.gf8bf728.el7.src.rpm

SHA-256: e2ff41157d329d60e8f00137e50ae314c00e61b1b12fec98a6299a98d1c13010

atomic-openshift-node-problem-detector-3.11.634-1.gc8f26da.el7.src.rpm

SHA-256: 7fc083b731386291e5f8a0cfa09c7b011b6d2da85f03d32e8f9c20a135eabfee

atomic-openshift-service-idler-3.11.634-1.g39cfc66.el7.src.rpm

SHA-256: 56fef0d67b65a4adc63b772c9454241aab41a5fda9126eabe1631688bb70c46d

atomic-openshift-web-console-3.11.634-1.g737ee87.el7.src.rpm

SHA-256: 941e4a88ff7e9f5e83162fe654c872c82b38774d65eb0d069dc3db5a11d1c079

golang-github-openshift-oauth-proxy-3.11.634-1.gedebe84.el7.src.rpm

SHA-256: 7f4bb80e13246d9b943e2cc361c3592d8b315b55538259596372f9f12737991d

golang-github-prometheus-alertmanager-3.11.634-1.g13de638.el7.src.rpm

SHA-256: ff26fef3de5c9fbfb1342631be31a72b2ce5043a67452b9d0f768f63ac1bc630

golang-github-prometheus-node_exporter-3.11.634-1.g609cd20.el7.src.rpm

SHA-256: 7c678549e90b94367f54c6138970835c61183042e42c246f5845f94492c8fa95

golang-github-prometheus-prometheus-3.11.634-1.g99aae51.el7.src.rpm

SHA-256: 721b7951c4e443c7afe5ffcbca72f91964b203192eb005b1d68775e15a6388b8

jenkins-2-plugins-3.11.1644412543-1.el7.src.rpm

SHA-256: 182441cca08c001a252bda84020a74346c70d0e4ec500a3d603b47bd7de684fb

jenkins-2.319.2.1644411558-1.el7.src.rpm

SHA-256: e9688c7c1f006190a60fda9e042138d41e7e098988abbc18e5e7a7a5ada84fdc

openshift-ansible-3.11.634-1.git.0.86bbe6f.el7.src.rpm

SHA-256: 433ec6cb243db9c17ecea5011762d1cc9c533fcf54cf62ab6d153ac05c63d08d

openshift-enterprise-autoheal-3.11.634-1.gf2f435d.el7.src.rpm

SHA-256: 8ff19af95a1571bf52e13eb4716c85cf2e984dfc9eae4e37d4a9494970afc66c

openshift-enterprise-cluster-capacity-3.11.634-1.g22be164.el7.src.rpm

SHA-256: 2cb65cdf63c9d42aa703d253b76a21f825e2872ddf54c5bcd48b9e706c63caa7

openshift-kuryr-3.11.634-1.g0c4bf66.el7.src.rpm

SHA-256: bafb7c6c5b8919dcc83bfcbcf0bcc7db8d56a7629f75a407884a0461032fa3d4

x86_64

atomic-enterprise-service-catalog-3.11.634-1.g2e6be86.el7.x86_64.rpm

SHA-256: f32c5257762c3f80b1a170fb0d6e3ef5eb8a0c3b379260998b5223700a43c58f

atomic-enterprise-service-catalog-svcat-3.11.634-1.g2e6be86.el7.x86_64.rpm

SHA-256: 464fdaabc6334695cd3ae351d4f10bd033580e3f06369614e7171a6e7579ec8a

atomic-openshift-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: 86f2db9621211c7d179b4b9757ac8fecdea6a9629b1521dd12e17a0423ff0e7f

atomic-openshift-clients-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: 1b873aaf911e49e1399dfb83deb51a3a18c5af001819ec56bdce41bb3ab79a2c

atomic-openshift-clients-redistributable-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: f5ea5fc93bb8c55481d803a47faaf32ba2fd401ece8b9758ba17a8e84c78a9c1

atomic-openshift-cluster-autoscaler-3.11.634-1.g99b2acf.el7.x86_64.rpm

SHA-256: ddab40dafa0986d52ba66f9bb1f9658afe779dec0da3e0d4d9e9feddb55d26eb

atomic-openshift-descheduler-3.11.634-1.gd435537.el7.x86_64.rpm

SHA-256: b3e9b6ab179698dff580b927d0016227de7e53517bfdf5d2da095688a7c067ab

atomic-openshift-docker-excluder-3.11.634-1.git.0.9b5be6d.el7.noarch.rpm

SHA-256: 4f155124b2e49b2e3bd331d2cc5d7da5ad6d88a38fc18aba5c24dc58d2693436

atomic-openshift-dockerregistry-3.11.634-1.g3571208.el7.x86_64.rpm

SHA-256: a95fcd59118ae800fa337555bed9326895144ee4a92e1b5db5f4148a455dc604

atomic-openshift-excluder-3.11.634-1.git.0.9b5be6d.el7.noarch.rpm

SHA-256: 99dd2b9c428507b3acf7eb0e4b140bd7dadc1a8d3bec108d5a08ad017c77b3d3

atomic-openshift-hyperkube-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: fed8150808d9a62ac7224cbbcc0b80f7df9cc1a3a701dca38658c4f6c746ceb3

atomic-openshift-hypershift-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: ce4087c3e1fe2d14a97623d6b0e41e66f7192196fb36e3423cfe28cc526c10df

atomic-openshift-master-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: 262630ea0890edd2c62215875e6bf3ea1ae8aa50bda08913c9bde9681686797e

atomic-openshift-metrics-server-3.11.634-1.gf8bf728.el7.x86_64.rpm

SHA-256: d91cd41b69e85f32539ac5e5eac4953e8ef3550cfae4225b0dc420f7d64956de

atomic-openshift-node-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: e10d8baa02187a8b84a19e67b09b4284edb861c5d9b897faea88b0f4ed16ebbc

atomic-openshift-node-problem-detector-3.11.634-1.gc8f26da.el7.x86_64.rpm

SHA-256: 8f5e73cc4ae72e9ab1d457d1804418a71c3a469795537475b9fde69641eaf2bb

atomic-openshift-pod-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: 8d34c5fedcfb908bd29f1a58ad897af068e8fc195377327a025da157ad32e5c4

atomic-openshift-sdn-ovs-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: 8bdd3860b4fb6f1c81c0210a2f1bd9f6b1e758234698ff6fa3f88a0fd914bdb9

atomic-openshift-service-idler-3.11.634-1.g39cfc66.el7.x86_64.rpm

SHA-256: 71970b0dff39bf8ed180006e4fc6f02092f3175923cd1ea3250d9a3e965a4985

atomic-openshift-template-service-broker-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: 765abe10b327e3f4b7ef873c3e07757f2960c4563b0d3afafc3e760e2cb864b0

atomic-openshift-tests-3.11.634-1.git.0.9b5be6d.el7.x86_64.rpm

SHA-256: d22b4989eb91fbef9fb82f68dd896b9de3d65b3744e0ccfdfc099f704ed82904

atomic-openshift-web-console-3.11.634-1.g737ee87.el7.x86_64.rpm

SHA-256: e8adf422a82baaa370f4f3c7f3a3b3c2131286309dee358b0dbf2369a7f063c5

golang-github-openshift-oauth-proxy-3.11.634-1.gedebe84.el7.x86_64.rpm

SHA-256: 03350842f400f5c5699955583f8c26356ac21006d4147ce1bd6c56491e61f119

jenkins-2-plugins-3.11.1644412543-1.el7.noarch.rpm

SHA-256: f904c848edf579d36b8918e4542d4ac837216c48f74f5aea78789db1f2aacf39

jenkins-2.319.2.1644411558-1.el7.noarch.rpm

SHA-256: 2f5619e73e13444bfc75f2c72e4601546739239cbdf35f96b171e25fc4ccd5e2

openshift-ansible-3.11.634-1.git.0.86bbe6f.el7.noarch.rpm

SHA-256: 3908c1f2756b019b704bebb45e45b5a6f7bec7422748733d830ba7185436e991

openshift-ansible-docs-3.11.634-1.git.0.86bbe6f.el7.noarch.rpm

SHA-256: a1e430b0dbe3c7efc9d4bfeb52239fa016d836dec33c29f56c27306f9b8f5459

openshift-ansible-playbooks-3.11.634-1.git.0.86bbe6f.el7.noarch.rpm

SHA-256: 9553175488de104b02cb8f0646f3a15c612fa48278a7c3cda973cb47f1ee80a0

openshift-ansible-roles-3.11.634-1.git.0.86bbe6f.el7.noarch.rpm

SHA-256: 545924aec243efb046ec582656cb703030206a4fa0a502581cfd5c3b55fb89aa

openshift-enterprise-autoheal-3.11.634-1.gf2f435d.el7.x86_64.rpm

SHA-256: ca554d0f0c8fa519a49ec64b84f85d0ed12a93848e516f837f2e1fa1e4a459d1

openshift-enterprise-cluster-capacity-3.11.634-1.g22be164.el7.x86_64.rpm

SHA-256: e5b5d6ac040e26da46ca2f40a5504475ede045df9b12a6a8decc15790661e02a

openshift-kuryr-cni-3.11.634-1.g0c4bf66.el7.noarch.rpm

SHA-256: 31efcdb9a61db3b47ecc5281f0c887ff9f5ffa0ea701e98fa892c8565e3fa0ee

openshift-kuryr-common-3.11.634-1.g0c4bf66.el7.noarch.rpm

SHA-256: c8ab66dd588404f68529322ac7ab5bf6e8403a4747799e543248e1bcfe9e8163

openshift-kuryr-controller-3.11.634-1.g0c4bf66.el7.noarch.rpm

SHA-256: 439de91982922d011eb02a11e2f1830a48ecc4f19ea6ee3ba277f3c1d7eb161e

prometheus-3.11.634-1.g99aae51.el7.x86_64.rpm

SHA-256: 6a5ac1d27db9f313f9283ab9c247ac4bfdefa39e661746b3f561d23efcbd8b0b

prometheus-alertmanager-3.11.634-1.g13de638.el7.x86_64.rpm

SHA-256: 25da151b20a52851a9fa8b14508938ed8fcfe19d09c8bb5dab81170f3c1fab01

prometheus-node-exporter-3.11.634-1.g609cd20.el7.x86_64.rpm

SHA-256: 1b1853f34422c0647f421dfb3d833ee718b35a8acc05b9b848b6b65e33299222

python2-kuryr-kubernetes-3.11.634-1.g0c4bf66.el7.noarch.rpm

SHA-256: b02670fd267438bf679aed42f28dea5514b3776ee77d15f193f67c39e4af2a3d

Red Hat OpenShift Container Platform for Power 3.11