The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade rubygem-sigdumpUpgrade kibanaUpgrade nodejs-merge-descriptorsUpgrade jenkins-plugin-workflow-scm-stepUpgrade nodejs-map-objUpgrade rubygem-elasticsearch-transportUpgrade nodejs-caselessUpgrade golang-github-prometheus-prometheusUpgrade nodejs-errnoUpgrade nodejs-colorsUpgrade nodejs-promiseUpgrade jenkins-plugin-subversionUpgrade nodejs-aws-sign2Upgrade jenkins-plugin-openshift-pipelineUpgrade jenkins-plugin-pipeline-stage-viewUpgrade nodejs-har-validatorUpgrade nodejs-pauseUpgrade golang-github-prometheus-node_exporterUpgrade nodejs-patternflyUpgrade python-pyUpgrade nodejs-align-textUpgrade image-inspectorUpgrade nodejs-pseudomapUpgrade nodejs-findup-syncUpgrade jenkins-plugin-docker-commonsUpgrade nodejs-cliuiUpgrade rubygem-elasticsearch-apiUpgrade nodejs-commanderUpgrade nodejs-kind-ofUpgrade ansible-service-brokerUpgrade rubygem-cool.ioUpgrade jenkins-plugin-blueocean-restUpgrade origin-kibanaUpgrade golang-github-prometheus-promuUpgrade jenkins-plugin-matrix-projectUpgrade nodejs-finalhandlerUpgrade nodejs-bytesUpgrade nodejs-extendUpgrade jenkins-plugin-kubernetesUpgrade nodejs-ee-firstUpgrade nodejs-right-alignUpgrade jenkins-plugin-sse-gatewayUpgrade rubygem-fluent-plugin-remote-syslogUpgrade jenkins-plugin-workflow-multibranchUpgrade nodejs-lodashUpgrade rubygem-fluent-plugin-docker_metadata_filterUpgrade nodejs-sntpUpgrade heapsterUpgrade nodejs-cryptilesUpgrade rubygem-thread_safeUpgrade nodejs-argparseUpgrade jenkins-plugin-mapdb-apiUpgrade jenkins-plugin-plain-credentialsUpgrade nodejs-center-alignUpgrade jenkins-plugin-pipeline-model-apiUpgrade nodejs-methodsUpgrade rubygem-msgpackUpgrade nodejs-util-deprecateUpgrade nodejs-keygripUpgrade nodejs-strip-ansiUpgrade nodejs-etagUpgrade rubygem-ffiUpgrade nodejs-resolveUpgrade python-httplib2Upgrade jenkins-plugin-pubsub-lightUpgrade rubygem-proxifierUpgrade nodejs-path-is-absoluteUpgrade atomic-openshiftUpgrade nodejs-xtendUpgrade jenkins-plugin-docker-workflowUpgrade nodejs-grunt-contrib-lessUpgrade golang-github-openshift-oauth-proxyUpgrade nodejs-wrappyUpgrade jenkins-plugin-matrix-authUpgrade rubygem-http-form_dataUpgrade nodejs-onceUpgrade http-parserUpgrade sconsUpgrade rubygem-multipart-postUpgrade nodejs-cookie-signatureUpgrade python-mockUpgrade nodejs-type-isUpgrade python-kubernetesUpgrade nodejs-statusesUpgrade jenkins-plugin-blueocean-eventsUpgrade nodejs-dateformatUpgrade nodejs-tough-cookieUpgrade rubygem-addressableUpgrade nodejs-indent-stringUpgrade nodejs-exitUpgrade nodejs-delayed-streamUpgrade jenkins-plugin-blueocean-git-pipelineUpgrade python-ruamel-yamlUpgrade nodejs-path-to-regexpUpgrade jenkins-plugin-pipeline-stage-tags-metadataUpgrade nodejs-camelcaseUpgrade runcUpgrade python-rsaUpgrade jenkins-plugin-workflow-apiUpgrade nodejs-has-ansiUpgrade rubygem-fluent-plugin-secure-forwardUpgrade nodejs-passportUpgrade nodejs-abbrevUpgrade jenkins-plugin-pipeline-stage-stepUpgrade openvswitch-ovn-kubernetesUpgrade nodejs-whichUpgrade nodejs-depdUpgrade nodejs-longestUpgrade nodejs-freshUpgrade python-s3transferUpgrade nodejs-has-flagUpgrade nodejs-mime-typesUpgrade jenkins-plugin-blueocean-webUpgrade mediawiki123Upgrade nodejs-node-uuidUpgrade nodejs-expressUpgrade thriftUpgrade jenkins-plugin-blueocean-display-urlUpgrade nodejs-packagingUpgrade rubygem-tzinfoUpgrade python-passlibUpgrade jenkins-plugin-authentication-tokensUpgrade jenkins-plugin-variantUpgrade jenkins-plugin-blueocean-personalizationUpgrade python-dockerUpgrade jenkins-plugin-junitUpgrade jenkins-plugin-multiple-scmsUpgrade jenkins-plugin-structsUpgrade nodejs-generate-object-propertyUpgrade nodejs-on-headersUpgrade nodejs-parseurlUpgrade nodejs-noptUpgrade nodejs-varyUpgrade nodejs-file-sync-cmpUpgrade rubygem-domain_nameUpgrade nodejs-passport-strategyUpgrade rubygem-fluent-plugin-record-modifierUpgrade nodejs-lcidUpgrade postgresql-apb-roleUpgrade python-cachetoolsUpgrade nodejs-concat-streamUpgrade rubygem-fluent-plugin-systemdUpgrade nodejs-globUpgrade nodejs-assert-plusUpgrade python-boto3Upgrade rubygem-docker-apiUpgrade cri-oUpgrade nodejs-http-signatureUpgrade mariadb-apb-roleUpgrade python-openshiftUpgrade nodejs-generate-functionUpgrade atomic-openshift-web-consoleUpgrade rubygem-http-cookieUpgrade nodejs-rimrafUpgrade jenkins-plugin-scm-apiUpgrade nodejs-typedarrayUpgrade rubygem-fluent-plugin-elasticsearchUpgrade jenkins-plugin-workflow-aggregatorUpgrade nodejs-negotiatorUpgrade nodejs-asyncUpgrade jenkins-plugin-workflow-step-apiUpgrade jenkins-plugin-openshift-syncUpgrade nodejs-ansi-stylesUpgrade jenkins-plugin-openshift-clientUpgrade nodejs-unc-path-regexUpgrade hawkular-openshift-agentUpgrade nodejs-string_decoderUpgrade nodejs-array-flattenUpgrade cri-toolsUpgrade nodejs-body-parserUpgrade nodejs-ctypeUpgrade perl-IO-StringUpgrade nodejs-is-finiteUpgrade jenkins-plugin-blueocean-jwtUpgrade apb-base-scriptsUpgrade nodejs-is-bufferUpgrade nodejs-esprimaUpgrade nodejs-amdefineUpgrade nodejs-invert-kvUpgrade nodejs-eventemitter2Upgrade nodejs-destroyUpgrade jenkins-plugin-pipeline-graph-analysisUpgrade jenkins-plugin-blueocean-i18nUpgrade nodejs-camelcase-keysUpgrade rubygem-public_suffixUpgrade mediawiki-container-scriptsUpgrade nodejs-http-errorsUpgrade ansible-asb-modulesUpgrade python-string_utilsUpgrade nodejs-serve-staticUpgrade rubygem-syslog_protocolUpgrade nodejs-source-mapUpgrade nodejs-hookerUpgrade rubygem-unf_extUpgrade python-dictdifferUpgrade nodejs-os-localeUpgrade jenkins-plugin-token-macroUpgrade python-clamdUpgrade jenkins-plugin-blueocean-rest-implUpgrade nodejs-process-nextick-argsUpgrade nodejs-asapUpgrade nodejs-qsUpgrade google-cloud-sdkUpgrade jenkins-plugin-git-clientUpgrade jenkins-plugin-pipeline-model-extensionsUpgrade rubygem-fluent-plugin-kubernetes_metadata_filterUpgrade nodejs-graceful-readlinkUpgrade nodejs-asn1Upgrade jenkins-plugin-pipeline-model-declarative-agentUpgrade rubygem-exconUpgrade jenkins-plugin-workflow-cpsUpgrade nodejs-passport-oauth2Upgrade nodejs-client-sessionsUpgrade jenkins-plugin-mailerUpgrade jenkins-2-pluginsUpgrade elasticsearchUpgrade jenkins-plugin-blueocean-pipeline-api-implUpgrade nodejs-decamelizeUpgrade jenkins-plugin-blueoceanUpgrade rubygem-mime-typesUpgrade nodejs-grunt-contrib-cleanUpgrade nodejs-base64urlUpgrade nodejs-morganUpgrade nodejs-escape-string-regexpUpgrade nodejs-graceful-fsUpgrade dumb-initUpgrade rubygem-unfUpgrade nodejs-mkdirpUpgrade nodejs-uid2Upgrade nodejs-basic-authUpgrade jenkins-plugin-gitUpgrade nodejs-json-stringify-safeUpgrade rubygem-httpUpgrade python-urllib3Upgrade nodejs-y18nUpgrade nodejs-escape-htmlUpgrade jenkins-plugin-mercurialUpgrade nodejs-yallistUpgrade nodejs-grunt-legacy-logUpgrade rubygem-recursive-open-structUpgrade nodejs-window-sizeUpgrade jenkins-plugin-display-url-apiUpgrade jenkins-plugin-handlebarsUpgrade nodejs-ansi-regexUpgrade nodejs-grunt-contrib-copyUpgrade python-elasticsearchUpgrade nodejs-grunt-legacy-log-utilsUpgrade jenkins-plugin-openshift-loginUpgrade nodejs-inheritsUpgrade nodejs-balanced-matchUpgrade python-jwtUpgrade jenkins-plugin-github-apiUpgrade nodejs-jsonpointerUpgrade nodejs-content-dispositionUpgrade jenkins-plugin-pipeline-model-definitionUpgrade nodejs-is-windowsUpgrade jenkins-plugin-blueocean-github-pipelineUpgrade rubygem-concurrent-rubyUpgrade jenkins-plugin-githubUpgrade nodejs-wordwrapUpgrade mediawiki-apb-roleUpgrade rubygem-resolve-hostnameUpgrade nodejs-coffee-scriptUpgrade nodejs-mime-dbUpgrade jenkins-plugin-blueocean-autofavoriteUpgrade cockpitUpgrade nodejs-media-typerUpgrade nodejs-requestUpgrade nodejs-mimeUpgrade nodejs-concat-mapUpgrade jenkins-plugin-workflow-basic-stepsUpgrade nodejs-isstreamUpgrade nodejs-boomUpgrade jenkins-plugin-workflow-durable-task-stepUpgrade nodejs-grunt-cliUpgrade python-libcloudUpgrade nodejs-yargsUpgrade jenkins-plugin-pipeline-input-stepUpgrade nodejs-getobjectUpgrade jenkins-plugin-momentjsUpgrade rubygem-minitestUpgrade nodejs-utils-mergeUpgrade python-pysocksUpgrade jenkins-plugin-ace-editorUpgrade elastic-curatorUpgrade nodejs-is-propertyUpgrade openshift-external-storageUpgrade nodejs-supports-colorUpgrade rubygem-mime-types-dataUpgrade jenkins-plugin-pipeline-build-stepUpgrade python-clickUpgrade jenkins-plugin-git-serverUpgrade nodejs-tunnel-agentUpgrade nodejs-cookiesUpgrade jenkins-plugin-credentialsUpgrade python-paramikoUpgrade nodejs-raw-bodyUpgrade nodejs-core-util-isUpgrade nodejs-eventemitter3Upgrade jenkins-plugin-workflow-supportUpgrade python-botocoreUpgrade rubygem-fluent-plugin-flatten-hashUpgrade nodejs-repeat-stringUpgrade nodejs-oauth-signUpgrade jenkins-plugin-jquery-detachedUpgrade rubygem-faradayUpgrade python-oauthlibUpgrade golang-github-prometheus-alertmanagerUpgrade nodejs-debugUpgrade nodejs-hoekUpgrade python-google-authUpgrade rubygem-systemd-journalUpgrade nodejs-brace-expansionUpgrade nodejs-meowUpgrade rubygem-fluent-plugin-viaq_data_modelUpgrade nodejs-form-dataUpgrade jenkins-plugin-pipeline-milestone-stepUpgrade atomic-openshift-dockerregistryUpgrade nodejs-readable-streamUpgrade jenkins-plugin-ssh-credentialsUpgrade python-certifiUpgrade nodejs-passport-http-bearerUpgrade nodejs-is-absoluteUpgrade python-crontabUpgrade nodejs-lessUpgrade rubygem-rest-clientUpgrade nodejs-range-parserUpgrade jenkins-plugin-credentials-bindingUpgrade nodejs-requires-portUpgrade nodejs-grunt-legacy-utilUpgrade containernetworking-pluginsUpgrade rubygem-lru_reduxUpgrade jenkins-plugin-blueocean-pipeline-editorUpgrade nodejs-is-my-json-validUpgrade nodejs-combined-streamUpgrade nodejs-iconv-liteUpgrade nodejs-repeatingUpgrade fluentdUpgrade nodejs-has-colorUpgrade nodejs-stringstreamUpgrade python-typingUpgrade nodejs-is-unc-pathUpgrade nodejs-unpipeUpgrade v8Upgrade rubygem-http_parser.rbUpgrade nodejs-sendUpgrade jenkins-plugin-github-branch-sourceUpgrade nodejs-acceptsUpgrade nodejs-chalkUpgrade nodejs-js-yamlUpgrade nodejs-blUpgrade nodejs-object-assignUpgrade jenkins-plugin-jackson2-apiUpgrade nodejs-is-relativeUpgrade nodejs-msUpgrade haproxyUpgrade jenkinsUpgrade nodejs-underscore-dot-stringUpgrade nodejs-hawkUpgrade search-guardUpgrade jenkins-plugin-blueocean-dashboardUpgrade nodejs-isarrayUpgrade ansible-kubernetes-modulesUpgrade rubygem-string-scrubUpgrade jenkins-plugin-pipeline-utility-stepsUpgrade python-jmespathUpgrade openshift-elasticsearch-pluginUpgrade jenkins-plugin-pipeline-rest-apiUpgrade nodejs-number-is-nanUpgrade jenkins-plugin-workflow-remote-loaderUpgrade nodejs-lru-cacheUpgrade python-cryptoUpgrade jenkins-plugin-branch-apiUpgrade nodejs-parse-durationUpgrade rubygem-fluent-mixin-config-placeholdersUpgrade python-keyczarUpgrade jenkins-plugin-metricsUpgrade jenkins-plugin-icon-shimUpgrade nodejs-proxy-addrUpgrade jenkins-plugin-workflow-jobUpgrade rubygem-tzinfo-dataUpgrade apbUpgrade rubygem-multi_jsonUpgrade python-requests-oauthlibUpgrade elasticsearch-cloud-kubernetesUpgrade jenkins-plugin-cloudbees-folderUpgrade rubygem-elasticsearchUpgrade rubygem-kubeclientUpgrade openshift-enterprise-image-registryUpgrade nodejs-gruntUpgrade nodejs-prrUpgrade rubygem-i18nUpgrade python-botoUpgrade jenkins-plugin-workflow-cps-global-libUpgrade jenkins-plugin-durable-taskUpgrade jenkins-plugin-blueocean-configUpgrade sshpassUpgrade jenkins-plugin-script-securityUpgrade rubygem-uuidtoolsUpgrade nodejs-oauthUpgrade nodejs-bluebirdUpgrade rubygem-yajl-rubyUpgrade nodejs-url-joinUpgrade nodejsUpgrade nodejs-on-finishedUpgrade python-futuresUpgrade jenkins-plugin-blueocean-commonsUpgrade nodejs-image-sizeUpgrade rubygem-netrcUpgrade nodejs-openshift-auth-proxyUpgrade rubygem-fluent-plugin-rewrite-tag-filterUpgrade nodejs-cookieUpgrade python-setuptoolsUpgrade nodejs-inflightUpgrade nodejs-content-typeUpgrade openshift-eventrouterUpgrade nodejs-forwardedUpgrade jenkins-plugin-favoriteUpgrade python-ruamel-ordereddictUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade nodejs-http-proxyUpgrade nodejs-ipaddr.jsUpgrade nodejs-sprintf-jsUpgrade nodejs-minimatchUpgrade nodejs-forever-agentUpgrade mysql-apb-roleUpgrade openshift-ansibleUpgrade nodejs-minimistUpgrade rubygem-activesupportUpgrade libuv | Jun 18, 2018 | Mar 28, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub