The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade python-requests-oauthlibUpgrade nodejs-has-colorUpgrade nodejs-inflightUpgrade nodejs-repeatingUpgrade nodejs-content-dispositionUpgrade nodejs-iconv-liteUpgrade rubygem-multi_jsonUpgrade rubygem-minitestUpgrade nodejs-mkdirpUpgrade nodejs-lru-cacheUpgrade nodejs-minimistUpgrade nodejs-isarrayUpgrade nodejs-graceful-fsUpgrade jenkins-plugin-git-serverUpgrade rubygem-exconUpgrade python-paramikoUpgrade nodejs-gruntUpgrade nodejs-utils-mergeUpgrade rubygem-recursive-open-structUpgrade jenkins-plugin-credentials-bindingUpgrade rubygem-faradayUpgrade nodejs-mime-dbUpgrade openshift-elasticsearch-pluginUpgrade jenkins-plugin-blueoceanUpgrade jenkins-plugin-pipeline-model-declarative-agentUpgrade nodejs-supports-colorUpgrade jenkinsUpgrade nodejs-is-windowsUpgrade nodejs-passport-http-bearerUpgrade nodejs-prrUpgrade jenkins-plugin-favoriteUpgrade nodejs-cookiesUpgrade nodejs-jsonpointerUpgrade jenkins-plugin-credentialsUpgrade openshift-external-storageUpgrade python-botocoreUpgrade openshift-enterprise-image-registryUpgrade jenkins-plugin-workflow-supportUpgrade jenkins-plugin-ssh-credentialsUpgrade python-clickUpgrade nodejs-yargsUpgrade rubygem-activesupportUpgrade jenkins-plugin-mailerUpgrade elastic-curatorUpgrade nodejs-passport-oauth2Upgrade jenkins-plugin-branch-apiUpgrade cockpitUpgrade mysql-apb-roleUpgrade nodejs-ipaddr.jsUpgrade nodejs-oauthUpgrade nodejs-stringstreamUpgrade nodejs-yallistUpgrade python-futuresUpgrade nodejs-hoekUpgrade jenkins-plugin-workflow-durable-task-stepUpgrade nodejs-sprintf-jsUpgrade atomic-openshift-dockerregistryUpgrade rubygem-unfUpgrade rubygem-i18nUpgrade python-google-authUpgrade rubygem-netrcUpgrade nodejs-is-propertyUpgrade python-oauthlibUpgrade jenkins-plugin-durable-taskUpgrade jenkins-plugin-githubUpgrade jenkins-plugin-blueocean-dashboardUpgrade rubygem-uuidtoolsUpgrade jenkins-plugin-ace-editorUpgrade nodejs-grunt-contrib-copyUpgrade nodejs-raw-bodyUpgrade jenkins-plugin-display-url-apiUpgrade jenkins-plugin-github-apiUpgrade python-jmespathUpgrade python-libcloudUpgrade jenkins-plugin-workflow-remote-loaderUpgrade jenkins-plugin-workflow-cps-global-libUpgrade nodejs-lessUpgrade nodejs-grunt-cliUpgrade jenkins-plugin-script-securityUpgrade jenkins-plugin-openshift-loginUpgrade nodejs-uid2Upgrade nodejs-openshift-auth-proxyUpgrade jenkins-plugin-icon-shimUpgrade nodejs-http-proxyUpgrade nodejs-morganUpgrade jenkins-plugin-workflow-jobUpgrade jenkins-plugin-cloudbees-folderUpgrade rubygem-http_parser.rbUpgrade rubygem-rest-clientUpgrade nodejs-client-sessionsUpgrade nodejs-is-unc-pathUpgrade nodejs-inheritsUpgrade nodejs-ansi-regexUpgrade jenkins-plugin-pipeline-rest-apiUpgrade python-typingUpgrade nodejs-isstreamUpgrade nodejs-js-yamlUpgrade nodejs-bluebirdUpgrade haproxyUpgrade nodejs-acceptsUpgrade rubygem-tzinfo-dataUpgrade nodejs-cookieUpgrade jenkins-plugin-blueocean-configUpgrade jenkins-plugin-blueocean-github-pipelineUpgrade golang-github-prometheus-alertmanagerUpgrade nodejs-proxy-addrUpgrade nodejs-eventemitter3Upgrade jenkins-plugin-pipeline-model-definitionUpgrade nodejs-grunt-legacy-log-utilsUpgrade jenkins-plugin-gitUpgrade python-urllib3Upgrade v8Upgrade nodejs-window-sizeUpgrade nodejs-boomUpgrade nodejs-forwardedUpgrade python-jwtUpgrade jenkins-plugin-blueocean-autofavoriteUpgrade nodejs-getobjectUpgrade nodejs-basic-authUpgrade rubygem-fluent-mixin-config-placeholdersUpgrade rubygem-mime-types-dataUpgrade nodejs-hawkUpgrade rubygem-elasticsearchUpgrade nodejs-number-is-nanUpgrade nodejs-requires-portUpgrade jenkins-plugin-pipeline-utility-stepsUpgrade rubygem-resolve-hostnameUpgrade nodejs-debugUpgrade jenkins-plugin-workflow-cpsUpgrade jenkins-plugin-jquery-detachedUpgrade python-ruamel-ordereddictUpgrade jenkins-plugin-pipeline-milestone-stepUpgrade jenkins-plugin-jackson2-apiUpgrade nodejs-blUpgrade jenkins-plugin-github-branch-sourceUpgrade openshift-ansibleUpgrade nodejs-tunnel-agentUpgrade nodejs-json-stringify-safeUpgrade nodejs-meowUpgrade python-keyczarUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade rubygem-fluent-plugin-viaq_data_modelUpgrade rubygem-lru_reduxUpgrade nodejs-forever-agentUpgrade nodejs-grunt-contrib-cleanUpgrade nodejs-sendUpgrade nodejs-url-joinUpgrade nodejs-grunt-legacy-logUpgrade nodejs-oauth-signUpgrade nodejs-form-dataUpgrade jenkins-plugin-metricsUpgrade nodejs-combined-streamUpgrade nodejs-readable-streamUpgrade ansible-kubernetes-modulesUpgrade nodejs-object-assignUpgrade rubygem-string-scrubUpgrade nodejs-is-my-json-validUpgrade nodejs-content-typeUpgrade rubygem-fluent-plugin-flatten-hashUpgrade search-guardUpgrade jenkins-plugin-blueocean-pipeline-editorUpgrade nodejs-balanced-matchUpgrade python-setuptoolsUpgrade nodejs-chalkUpgrade python-crontabUpgrade nodejs-media-typerUpgrade jenkins-plugin-workflow-basic-stepsUpgrade nodejs-escape-string-regexpUpgrade dumb-initUpgrade jenkins-plugin-blueocean-commonsUpgrade libuvUpgrade sshpassUpgrade nodejs-concat-mapUpgrade nodejs-is-relativeUpgrade jenkins-2-pluginsUpgrade jenkins-plugin-blueocean-pipeline-api-implUpgrade nodejsUpgrade fluentdUpgrade rubygem-systemd-journalUpgrade nodejs-coffee-scriptUpgrade elasticsearch-cloud-kubernetesUpgrade jenkins-plugin-pipeline-build-stepUpgrade rubygem-concurrent-rubyUpgrade nodejs-is-absoluteUpgrade nodejs-wordwrapUpgrade containernetworking-pluginsUpgrade rubygem-httpUpgrade rubygem-fluent-plugin-rewrite-tag-filterUpgrade nodejs-escape-htmlUpgrade nodejs-repeat-stringUpgrade nodejs-parse-durationUpgrade nodejs-on-finishedUpgrade nodejs-image-sizeUpgrade nodejs-underscore-dot-stringUpgrade rubygem-fluent-plugin-secure-forwardUpgrade nodejs-mimeUpgrade rubygem-elasticsearch-apiUpgrade nodejs-msUpgrade nodejs-strip-ansiUpgrade nodejs-passport-strategyUpgrade nodejs-varyUpgrade python-cachetoolsUpgrade nodejs-is-finiteUpgrade jenkins-plugin-handlebarsUpgrade jenkins-plugin-authentication-tokensUpgrade jenkins-plugin-plain-credentialsUpgrade cri-oUpgrade nodejs-cliuiUpgrade python-elasticsearchUpgrade nodejs-noptUpgrade python-pyUpgrade nodejs-range-parserUpgrade nodejs-globUpgrade openshift-eventrouterUpgrade nodejs-commanderUpgrade jenkins-plugin-mercurialUpgrade nodejs-requestUpgrade nodejs-unpipeUpgrade rubygem-mime-typesUpgrade nodejs-http-errorsUpgrade python-string_utilsUpgrade nodejs-source-mapUpgrade nodejs-asn1Upgrade nodejs-lodashUpgrade nodejs-process-nextick-argsUpgrade python-cryptoUpgrade nodejs-kind-ofUpgrade python-botoUpgrade rubygem-proxifierUpgrade rubygem-fluent-plugin-elasticsearchUpgrade nodejs-longestUpgrade rubygem-http-form_dataUpgrade nodejs-grunt-legacy-utilUpgrade nodejs-base64urlUpgrade nodejs-colorsUpgrade nodejs-graceful-readlinkUpgrade jenkins-plugin-git-clientUpgrade nodejs-core-util-isUpgrade jenkins-plugin-mapdb-apiUpgrade jenkins-plugin-momentjsUpgrade rubygem-thread_safeUpgrade nodejs-depdUpgrade python-pysocksUpgrade jenkins-plugin-multiple-scmsUpgrade nodejs-brace-expansionUpgrade postgresql-apb-roleUpgrade python-boto3Upgrade nodejs-http-signatureUpgrade nodejs-delayed-streamUpgrade rubygem-fluent-plugin-remote-syslogUpgrade nodejs-minimatchUpgrade nodejs-abbrevUpgrade nodejs-body-parserUpgrade nodejs-har-validatorUpgrade nodejs-map-objUpgrade nodejs-y18nUpgrade nodejs-destroyUpgrade python-ruamel-yamlUpgrade nodejs-has-flagUpgrade jenkins-plugin-pipeline-stage-viewUpgrade mariadb-apb-roleUpgrade nodejs-packagingUpgrade rubygem-yajl-rubyUpgrade rubygem-kubeclientUpgrade nodejs-string_decoderUpgrade nodejs-keygripUpgrade nodejs-center-alignUpgrade jenkins-plugin-pipeline-model-extensionsUpgrade jenkins-plugin-pipeline-stage-stepUpgrade rubygem-tzinfoUpgrade nodejs-ansi-stylesUpgrade apb-base-scriptsUpgrade nodejs-unc-path-regexUpgrade rubygem-cool.ioUpgrade kibanaUpgrade nodejs-camelcaseUpgrade nodejs-bytesUpgrade jenkins-plugin-openshift-clientUpgrade nodejs-type-isUpgrade nodejs-mime-typesUpgrade rubygem-ffiUpgrade jenkins-plugin-pipeline-model-apiUpgrade jenkins-plugin-kubernetesUpgrade jenkins-plugin-openshift-pipelineUpgrade nodejs-eventemitter2Upgrade jenkins-plugin-blueocean-git-pipelineUpgrade nodejs-has-ansiUpgrade nodejs-ee-firstUpgrade nodejs-decamelizeUpgrade jenkins-plugin-workflow-scm-stepUpgrade rubygem-addressableUpgrade atomic-openshiftUpgrade jenkins-plugin-blueocean-i18nUpgrade sconsUpgrade elasticsearchUpgrade golang-github-prometheus-prometheusUpgrade python-certifiUpgrade nodejs-array-flattenUpgrade hawkular-openshift-agentUpgrade python-httplib2Upgrade http-parserUpgrade nodejs-esprimaUpgrade nodejs-tough-cookieUpgrade mediawiki123Upgrade python-dockerUpgrade nodejs-is-bufferUpgrade rubygem-domain_nameUpgrade nodejs-whichUpgrade rubygem-fluent-plugin-systemdUpgrade nodejs-expressUpgrade jenkins-plugin-structsUpgrade rubygem-docker-apiUpgrade jenkins-plugin-blueocean-personalizationUpgrade nodejs-rimrafUpgrade nodejs-generate-functionUpgrade rubygem-fluent-plugin-record-modifierUpgrade nodejs-finalhandlerUpgrade nodejs-file-sync-cmpUpgrade python-mockUpgrade nodejs-concat-streamUpgrade jenkins-plugin-workflow-step-apiUpgrade jenkins-plugin-workflow-aggregatorUpgrade nodejs-serve-staticUpgrade nodejs-generate-object-propertyUpgrade nodejs-typedarrayUpgrade nodejs-sntpUpgrade nodejs-cryptilesUpgrade nodejs-pseudomapUpgrade nodejs-merge-descriptorsUpgrade nodejs-lcidUpgrade jenkins-plugin-workflow-multibranchUpgrade mediawiki-container-scriptsUpgrade rubygem-public_suffixUpgrade nodejs-asapUpgrade jenkins-plugin-token-macroUpgrade jenkins-plugin-openshift-syncUpgrade nodejs-findup-syncUpgrade jenkins-plugin-blueocean-rest-implUpgrade jenkins-plugin-docker-workflowUpgrade nodejs-right-alignUpgrade nodejs-xtendUpgrade jenkins-plugin-blueocean-webUpgrade golang-github-openshift-oauth-proxyUpgrade nodejs-dateformatUpgrade rubygem-sigdumpUpgrade nodejs-errnoUpgrade nodejs-path-to-regexpUpgrade python-s3transferUpgrade nodejs-asyncUpgrade jenkins-plugin-variantUpgrade python-passlibUpgrade perl-IO-StringUpgrade jenkins-plugin-blueocean-eventsUpgrade python-kubernetesUpgrade nodejs-util-deprecateUpgrade nodejs-path-is-absoluteUpgrade nodejs-indent-stringUpgrade jenkins-plugin-blueocean-display-urlUpgrade nodejs-caselessUpgrade apbUpgrade nodejs-node-uuidUpgrade nodejs-onceUpgrade python-rsaUpgrade cri-toolsUpgrade thriftUpgrade rubygem-multipart-postUpgrade jenkins-plugin-workflow-apiUpgrade nodejs-parseurlUpgrade jenkins-plugin-junitUpgrade openvswitch-ovn-kubernetesUpgrade nodejs-patternflyUpgrade rubygem-fluent-plugin-kubernetes_metadata_filterUpgrade ansible-asb-modulesUpgrade golang-github-prometheus-node_exporterUpgrade python-dictdifferUpgrade nodejs-freshUpgrade jenkins-plugin-subversionUpgrade nodejs-exitUpgrade nodejs-aws-sign2Upgrade jenkins-plugin-pipeline-stage-tags-metadataUpgrade runcUpgrade nodejs-amdefineUpgrade python-clamdUpgrade rubygem-msgpackUpgrade heapsterUpgrade nodejs-argparseUpgrade image-inspectorUpgrade nodejs-qsUpgrade golang-github-prometheus-promuUpgrade rubygem-http-cookieUpgrade nodejs-extendUpgrade nodejs-assert-plusUpgrade nodejs-os-localeUpgrade rubygem-unf_extUpgrade nodejs-methodsUpgrade nodejs-passportUpgrade jenkins-plugin-docker-commonsUpgrade nodejs-cookie-signatureUpgrade rubygem-elasticsearch-transportUpgrade rubygem-fluent-plugin-docker_metadata_filterUpgrade jenkins-plugin-blueocean-restUpgrade jenkins-plugin-sse-gatewayUpgrade jenkins-plugin-matrix-projectUpgrade google-cloud-sdkUpgrade origin-kibanaUpgrade nodejs-align-textUpgrade jenkins-plugin-scm-apiUpgrade jenkins-plugin-pipeline-graph-analysisUpgrade nodejs-hookerUpgrade nodejs-resolveUpgrade ansible-service-brokerUpgrade nodejs-statusesUpgrade nodejs-pauseUpgrade rubygem-syslog_protocolUpgrade nodejs-etagUpgrade nodejs-on-headersUpgrade jenkins-plugin-matrix-authUpgrade nodejs-camelcase-keysUpgrade atomic-openshift-web-consoleUpgrade nodejs-invert-kvUpgrade python-openshiftUpgrade nodejs-negotiatorUpgrade mediawiki-apb-roleUpgrade jenkins-plugin-pubsub-lightUpgrade nodejs-promiseUpgrade jenkins-plugin-blueocean-jwtUpgrade nodejs-wrappyUpgrade nodejs-grunt-contrib-lessUpgrade nodejs-ctypeUpgrade jenkins-plugin-pipeline-input-step | Jun 18, 2018 | Mar 28, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub