Lucene search

K
redhatRedHatRHSA-2016:1773
HistoryAug 24, 2016 - 7:27 p.m.

(RHSA-2016:1773) Important: Red Hat OpenShift Enterprise 2.2.10 security, bug fix, and enhancement update

2016-08-2419:27:03
access.redhat.com
46

0.972 High

EPSS

Percentile

99.8%

OpenShift Enterprise by Red Hat is the company’s cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or
private cloud deployments.

  • The Jenkins continuous integration server has been updated to upstream
    version 1.651.2 LTS that addresses a large number of security issues,
    including open redirects, a potential denial of service, unsafe handling of
    user provided environment variables and several instances of sensitive
    information disclosure. (CVE-2014-3577, CVE-2016-0788, CVE-2016-0789,
    CVE-2016-0790, CVE-2016-0791, CVE-2016-0792, CVE-2016-3721, CVE-2016-3722,
    CVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727,
    CVE-2015-7501)

Space precludes documenting all of the bug fixes and enhancements in this
advisory. See the OpenShift Enterprise Technical Notes, which will be
updated shortly for release 2.2.10, for details about these changes:

https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/Technical_Notes/index.html

All OpenShift Enterprise 2 users are advised to upgrade to these updated
packages.