Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:2280
HistoryMay 31, 2022 - 5:28 a.m.

(RHSA-2022:2280) Important: OpenShift Container Platform 3.11.705 security update

2022-05-3105:28:21
access.redhat.com
134

0.005 Low

EPSS

Percentile

75.8%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.705. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2022:2281

Security Fix(es):

  • credentials: Stored XSS vulnerabilities in jenkins plugin
    (CVE-2022-29036)
  • subversion: Stored XSS vulnerabilities in Jenkins subversion plugin
    (CVE-2022-29046)
  • prometheus/client_golang: Denial of service using
    InstrumentHandlerCounter (CVE-2022-21698)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)listed in the References section.

All OpenShift Container Platform 3.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/3.11/updating/updating-cluster-cli.html

OSVersionArchitecturePackageVersionFilename
RedHat7ppc64leatomic-openshift-descheduler< 3.11.705-1.gd435537.el7atomic-openshift-descheduler-3.11.705-1.gd435537.el7.ppc64le.rpm
RedHat7ppc64leatomic-openshift-template-service-broker< 3.11.705-1.git.0.7a17a5d.el7atomic-openshift-template-service-broker-3.11.705-1.git.0.7a17a5d.el7.ppc64le.rpm
RedHat7noarchatomic-openshift-docker-excluder< 3.11.705-1.git.0.7a17a5d.el7atomic-openshift-docker-excluder-3.11.705-1.git.0.7a17a5d.el7.noarch.rpm
RedHat7noarchatomic-openshift-excluder< 3.11.705-1.git.0.7a17a5d.el7atomic-openshift-excluder-3.11.705-1.git.0.7a17a5d.el7.noarch.rpm
RedHat7x86_64atomic-openshift-descheduler< 3.11.705-1.gd435537.el7atomic-openshift-descheduler-3.11.705-1.gd435537.el7.x86_64.rpm
RedHat7x86_64atomic-openshift-master< 3.11.705-1.git.0.7a17a5d.el7atomic-openshift-master-3.11.705-1.git.0.7a17a5d.el7.x86_64.rpm
RedHat7noarchopenshift-kuryr-controller< 3.11.705-1.g0c4bf66.el7openshift-kuryr-controller-3.11.705-1.g0c4bf66.el7.noarch.rpm
RedHat7x86_64atomic-openshift-cluster-autoscaler< 3.11.705-1.g99b2acf.el7atomic-openshift-cluster-autoscaler-3.11.705-1.g99b2acf.el7.x86_64.rpm
RedHat7noarchopenshift-ansible-docs< 3.11.705-1.git.0.ad19a48.el7openshift-ansible-docs-3.11.705-1.git.0.ad19a48.el7.noarch.rpm
RedHat7x86_64atomic-openshift-node-problem-detector< 3.11.705-1.gc8f26da.el7atomic-openshift-node-problem-detector-3.11.705-1.gc8f26da.el7.x86_64.rpm
Rows per page:
1-10 of 621

Related

nessus 30
redhat 19
cvelist 3
nvd 3
checkpoint_advisories 1
osv 12
github 3
cnvd 2
redhatcve 3
veracode 3
cve 3
prion 3
cbl_mariner 16
openvas 53
suse 7
fedora 31
wolfi 1
debiancve 1
mageia 1
ubuntucve 1
alpinelinux 1
cgr 1
ibm 1
nessus
nessus
RHEL 7 : OpenShift Container Platform 3.11.705 (RHSA-2022:2280)
2022-09-08 00:00:00
RHEL 8 : OpenShift Container Platform 4.7.52 paackages (RHSA-2022:4909)
2022-09-08 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.6.59 (RHSA-2022:4947)
2022-09-08 00:00:00
redhat
redhat
(RHSA-2022:4947) Important: OpenShift Container Platform 4.6.59 security update
2022-06-17 05:15:48
(RHSA-2022:4909) Important: OpenShift Container Platform 4.7.52 paackages and security update
2022-06-10 03:57:32
(RHSA-2022:1600) Moderate: OpenShift Container Platform 4.10.12 security update
2022-05-02 18:14:27
cvelist
cvelist
CVE-2022-29036
2022-04-12 00:00:00
CVE-2022-29046
2022-04-12 19:50:44
CVE-2022-21698 Uncontrolled Resource Consumption in promhttp
2022-02-15 00:00:00
nvd
nvd
CVE-2022-29036
2022-04-12 20:15:09
CVE-2022-29046
2022-04-12 20:15:09
CVE-2022-21698
2022-02-15 16:15:08
checkpoint_advisories
checkpoint_advisories
Jenkins Credentials Plugin Cross-site Scripting (CVE-2022-29036)
2022-07-11 00:00:00
osv
osv
CVE-2022-29036
2022-04-12 20:15:09
Cross-site Scripting in Jenkins Credentials Plugin
2022-04-13 00:00:18
Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin
2022-04-13 00:00:17
github
github
Cross-site Scripting in Jenkins Credentials Plugin
2022-04-13 00:00:18
Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin
2022-04-13 00:00:17
Uncontrolled Resource Consumption in promhttp
2022-02-16 22:26:35
cnvd
cnvd
Jenkins Credentials Plugin Cross-Site Scripting Vulnerability
2022-04-13 00:00:00
Jenkins Subversion Plugin Cross-Site Scripting Vulnerability
2022-04-13 00:00:00
redhatcve
redhatcve
CVE-2022-29036
2022-04-13 09:22:34
CVE-2022-29046
2022-04-13 09:22:34
CVE-2022-21698
2022-02-15 17:20:06
veracode
veracode
Cross-site Scripting (XSS)
2022-06-03 14:55:36
Cross-site Scripting(XSS)
2022-06-03 14:55:26
Denial Of Service (DoS)
2022-02-16 07:17:26
cve
cve
CVE-2022-29036
2022-04-12 20:15:09
CVE-2022-29046
2022-04-12 20:15:09
CVE-2022-21698
2022-02-15 16:15:08
prion
prion
Cross site scripting
2022-04-12 20:15:00
Cross site scripting
2022-04-12 20:15:00
Design/Logic Flaw
2022-02-15 16:15:00
cbl_mariner
cbl_mariner
CVE-2022-21698 affecting package local-path-provisioner for versions less than 0.0.21-14
2024-02-02 20:37:47
CVE-2022-21698 affecting package kube-vip-cloud-provider for versions less than 0.0.2-14
2024-02-01 18:12:35
CVE-2022-21698 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-17
2024-01-31 22:51:31
openvas
openvas
Fedora: Security Advisory for stargz-snapshotter (FEDORA-2022-6c4cb64314)
2022-03-29 00:00:00
Fedora: Security Advisory for stargz-snapshotter (FEDORA-2022-e244ad73d6)
2022-04-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2137-1)
2022-06-21 00:00:00
suse
suse
Security update for node_exporter (important)
2022-06-20 00:00:00
Security update for golang-github-prometheus-alertmanager (important)
2022-06-20 00:00:00
Security update for firewalld, golang-github-prometheus-prometheus (important)
2022-04-27 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: stargz-snapshotter-0.10.2-1.fc34
2022-04-14 16:06:55
[SECURITY] Fedora 36 Update: skopeo-1.7.0-1.fc36
2022-03-29 00:20:58
[SECURITY] Fedora 34 Update: skopeo-1.7.0-1.fc34
2022-04-02 01:57:12
wolfi
wolfi
CVE-2022-21698 vulnerabilities
2024-06-29 09:08:33
debiancve
debiancve
CVE-2022-21698
2022-02-15 16:15:08
mageia
mageia
Updated golang-github-prometheus-client packages fix security vulnerability
2022-05-15 13:06:40
ubuntucve
ubuntucve
CVE-2022-21698
2022-02-15 00:00:00
alpinelinux
alpinelinux
CVE-2022-21698
2022-02-15 16:15:08
cgr
cgr
CVE-2022-21698 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
Security Bulletin: CVE-2022-27664, CVE-2022-21698, CVE-2021-43565 and CVE-2022-27191 may affect IBM CICS TX Standard
2023-03-29 19:03:37

0.005 Low

EPSS

Percentile

75.8%

JSON
Related for RHSA-2022:2280
nessus30redhat19cvelist3nvd3checkpoint_advisories1osv12github3cnvd2redhatcve3veracode3cve3prion3cbl_mariner16openvas53suse7fedora31wolfi1debiancve1mageia1ubuntucve1alpinelinux1cgr1ibm1