Action not permitted
Modal body text goes here.
cve-2017-1002101
Vulnerability from cvelistv5
Published
2018-03-13 17:00
Modified
2024-08-05 22:00
Severity ?
EPSS score ?
Summary
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
References
▼ | URL | Tags | |
---|---|---|---|
jordan@liggitt.net | http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html | ||
jordan@liggitt.net | https://access.redhat.com/errata/RHSA-2018:0475 | Third Party Advisory | |
jordan@liggitt.net | https://github.com/bgeesaman/subpath-exploit/ | Exploit, Third Party Advisory | |
jordan@liggitt.net | https://github.com/kubernetes/kubernetes/issues/60813 | Issue Tracking, Mitigation, Vendor Advisory |
Impacted products
▼ | Vendor | Product |
---|---|---|
Kubernetes | Kubernetes |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T22:00:41.667Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "RHSA-2018:0475", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2018:0475" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/kubernetes/kubernetes/issues/60813" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/bgeesaman/subpath-exploit/" }, { "name": "openSUSE-SU-2020:0554", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Kubernetes", "vendor": "Kubernetes", "versions": [ { "status": "affected", "version": "v1.3.x" }, { "status": "affected", "version": "v1.4.x" }, { "status": "affected", "version": "v1.5.x" }, { "status": "affected", "version": "v1.6.x" }, { "lessThan": "v1.7.14", "status": "affected", "version": "unspecified", "versionType": "custom" }, { "lessThan": "v1.8.9", "status": "affected", "version": "unspecified", "versionType": "custom" }, { "lessThan": "v1.9.4", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "value": "Reported by Maxim Ivanov" } ], "dateAssigned": "2017-12-06T00:00:00", "datePublic": "2018-03-05T00:00:00", "descriptions": [ { "lang": "en", "value": "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem." } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "description": "handled symbolic links insecurely", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2020-04-26T20:06:14", "orgId": "a6081bf6-c852-4425-ad4f-a67919267565", "shortName": "kubernetes" }, "references": [ { "name": "RHSA-2018:0475", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2018:0475" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/kubernetes/kubernetes/issues/60813" }, { "tags": [ "x_refsource_MISC" ], "url": "https://github.com/bgeesaman/subpath-exploit/" }, { "name": "openSUSE-SU-2020:0554", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@kubernetes.io", "DATE_ASSIGNED": "2017-12-06", "ID": "CVE-2017-1002101", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Kubernetes", "version": { "version_data": [ { "version_affected": "=", "version_value": "v1.3.x" }, { "version_affected": "=", "version_value": "v1.4.x" }, { "version_affected": "=", "version_value": "v1.5.x" }, { "version_affected": "=", "version_value": "v1.6.x" }, { "version_affected": "\u003c", "version_value": "v1.7.14" }, { "version_affected": "\u003c", "version_value": "v1.8.9" }, { "version_affected": "\u003c", "version_value": "v1.9.4" } ] } } ] }, "vendor_name": "Kubernetes" } ] } }, "credit": [ "Reported by Maxim Ivanov" ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem." } ] }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "handled symbolic links insecurely" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2018:0475", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:0475" }, { "name": "https://github.com/kubernetes/kubernetes/issues/60813", "refsource": "CONFIRM", "url": "https://github.com/kubernetes/kubernetes/issues/60813" }, { "name": "https://github.com/bgeesaman/subpath-exploit/", "refsource": "MISC", "url": "https://github.com/bgeesaman/subpath-exploit/" }, { "name": "openSUSE-SU-2020:0554", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "a6081bf6-c852-4425-ad4f-a67919267565", "assignerShortName": "kubernetes", "cveId": "CVE-2017-1002101", "datePublished": "2018-03-13T17:00:00", "dateReserved": "2017-12-07T00:00:00", "dateUpdated": "2024-08-05T22:00:41.667Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2017-1002101\",\"sourceIdentifier\":\"jordan@liggitt.net\",\"published\":\"2018-03-13T17:29:00.233\",\"lastModified\":\"2019-10-09T23:21:25.697\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem.\"},{\"lang\":\"es\",\"value\":\"En Kubernetes, en versiones 1.3.x, 1.4.x, 1.5.x, 1.6.x y en versiones anteriores a la 1.7.14, 1.8.9 y 1.9.4, los contenedores que emplean montajes de volumen subpath con cualquier tipo de volumen (incluyendo pods no privilegiados, dependientes de los permisos de archivo) pueden acceder a archivos/directorios fuera del volumen, incluyendo el sistema de archivos del host.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.6,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.1,\"impactScore\":5.8},{\"source\":\"jordan@liggitt.net\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:P/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.5},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-59\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.3.0\",\"versionEndIncluding\":\"1.3.10\",\"matchCriteriaId\":\"85841C2A-31F1-4725-BE9D-0E346D133CC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.4.0\",\"versionEndIncluding\":\"1.4.12\",\"matchCriteriaId\":\"3CE7BB45-879A-48CE-BE8B-463CB97B8ABA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.5.0\",\"versionEndIncluding\":\"1.5.8\",\"matchCriteriaId\":\"0990DE9E-F42A-42E5-9589-ACFCD79950E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.6.0\",\"versionEndIncluding\":\"1.6.13\",\"matchCriteriaId\":\"520D312F-37C8-4604-B4C3-D9DB8317CF9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.7.0\",\"versionEndExcluding\":\"1.7.14\",\"matchCriteriaId\":\"F39F83C4-3CC3-4681-8363-0986209D4E2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.8.0\",\"versionEndExcluding\":\"1.8.9\",\"matchCriteriaId\":\"CEE0979F-ED58-43D8-9E3B-7261B1782DD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.9.0\",\"versionEndExcluding\":\"1.9.4\",\"matchCriteriaId\":\"E4818E0C-B0ED-424F-AD73-B87777FD9D9E\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html\",\"source\":\"jordan@liggitt.net\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:0475\",\"source\":\"jordan@liggitt.net\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/bgeesaman/subpath-exploit/\",\"source\":\"jordan@liggitt.net\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/kubernetes/kubernetes/issues/60813\",\"source\":\"jordan@liggitt.net\",\"tags\":[\"Issue Tracking\",\"Mitigation\",\"Vendor Advisory\"]}]}}" } }
gsd-2017-1002101
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2017-1002101", "description": "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem.", "id": "GSD-2017-1002101", "references": [ "https://www.suse.com/security/cve/CVE-2017-1002101.html", "https://access.redhat.com/errata/RHSA-2018:0475", "https://linux.oracle.com/cve/CVE-2017-1002101.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2017-1002101" ], "details": "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem.", "id": "GSD-2017-1002101", "modified": "2023-12-13T01:21:12.278045Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security@kubernetes.io", "DATE_ASSIGNED": "2017-12-06", "ID": "CVE-2017-1002101", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Kubernetes", "version": { "version_data": [ { "version_affected": "=", "version_value": "v1.3.x" }, { "version_affected": "=", "version_value": "v1.4.x" }, { "version_affected": "=", "version_value": "v1.5.x" }, { "version_affected": "=", "version_value": "v1.6.x" }, { "version_affected": "\u003c", "version_value": "v1.7.14" }, { "version_affected": "\u003c", "version_value": "v1.8.9" }, { "version_affected": "\u003c", "version_value": "v1.9.4" } ] } } ] }, "vendor_name": "Kubernetes" } ] } }, "credit": [ "Reported by Maxim Ivanov" ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem." } ] }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "handled symbolic links insecurely" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2018:0475", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:0475" }, { "name": "https://github.com/kubernetes/kubernetes/issues/60813", "refsource": "CONFIRM", "url": "https://github.com/kubernetes/kubernetes/issues/60813" }, { "name": "https://github.com/bgeesaman/subpath-exploit/", "refsource": "MISC", "url": "https://github.com/bgeesaman/subpath-exploit/" }, { "name": "openSUSE-SU-2020:0554", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" } ] } }, "gitlab.com": { "advisories": [ { "affected_range": "\u003e=v1.3.0 \u003c=v1.3.10 || \u003e=v1.4.0 \u003c=v1.4.12 || \u003e=v1.5.0 \u003c=v1.5.8 || \u003e=v1.6.0 \u003c=v1.6.13 || \u003e=v1.7.0 \u003cv1.7.14 || \u003e=v1.8.0 \u003cv1.8.9 || \u003e=v1.9.0 \u003cv1.9.4", "affected_versions": "All versions starting from 1.3.0 up to 1.3.10, all versions starting from 1.4.0 up to 1.4.12, all versions starting from 1.5.0 up to 1.5.8, all versions starting from 1.6.0 up to 1.6.13, all versions starting from 1.7.0 before 1.7.14, all versions starting from 1.8.0 before 1.8.9, all versions starting from 1.9.0 before 1.9.4", "cvss_v2": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "cvss_v3": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "cwe_ids": [ "CWE-1035", "CWE-59", "CWE-937" ], "date": "2019-10-09", "description": "In Kubernetes, containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions), can access files and directories outside the volume, including the host\u0027s filesystem.", "fixed_versions": [ "v1.3.11", "v1.5.9", "v1.6.14", "v1.7.14", "v1.8.9", "v1.9.4" ], "identifier": "CVE-2017-1002101", "identifiers": [ "CVE-2017-1002101" ], "not_impacted": "All versions before 1.3.0, all versions after 1.3.10 before 1.4.0, all versions after 1.4.12 before 1.5.0, all versions after 1.5.8 before 1.6.0, all versions after 1.6.13 before 1.7.0, all versions starting from 1.7.14 before 1.8.0, all versions starting from 1.8.9 before 1.9.0, all versions starting from 1.9.4", "package_slug": "go/github.com/kubernetes/kubernetes", "pubdate": "2018-03-13", "solution": "Upgrade to versions 1.3.11, 1.5.0, 1.5.9, 1.6.14, 1.7.14, 1.8.9, 1.9.4 or above.", "title": "Improper Link Resolution Before File Access", "urls": [ "https://nvd.nist.gov/vuln/detail/CVE-2017-1002101", "https://github.com/kubernetes/kubernetes/issues/60813" ], "uuid": "000f41ab-a68c-4bdd-98ce-f6b8b3fe5a61", "versions": [ { "commit": { "sha": "346bcde207a77e555fa87fe3de4262ee1f9e24bf", "tags": [ "v1.3.0" ], "timestamp": "20160701211906" }, "number": "v1.3.0" }, { "commit": { "sha": "1b38de6a9dbcd8c4f613449e4fcf190d36751682", "tags": [ "v1.4.0" ], "timestamp": "20160926200947" }, "number": "v1.4.0" }, { "commit": { "sha": "c46df74c5df2b59ac99a39ee29e0949926b2a466", "tags": [ "v1.3.10" ], "timestamp": "20161031220611" }, "number": "v1.3.10" }, { "commit": { "sha": "86f65a0933ad97533eacf371fabc8d666229dd57", "tags": [ "v1.3.11-beta.0" ], "timestamp": "20161031224214" }, "number": "v1.3.11" }, { "commit": { "sha": "c7761bada49581ee1813737764c007d3e6a405b0", "tags": [ "v1.5.0" ], "timestamp": "20161213002943" }, "number": "v1.5.0" }, { "commit": { "sha": "7ee608dd786340302239f687b4dbe291ee78b5f3", "tags": [ "v1.6.0" ], "timestamp": "20170328182306" }, "number": "v1.6.0" }, { "commit": { "sha": "ed8752f8e505bc5c0a06bd67f1bcd9759ab718e3", "tags": [ "v1.4.12" ], "timestamp": "20170420225346" }, "number": "v1.4.12" }, { "commit": { "sha": "b6928f788afa6663acedb0dcfee3dcf0e16ece70", "tags": [ "v1.7.0" ], "timestamp": "20170630005316" }, "number": "v1.7.0" }, { "commit": { "sha": "36393a268be8e17af666236269f9c44959d8d716", "tags": [ "v1.8.0" ], "timestamp": "20170929001357" }, "number": "v1.8.0" }, { "commit": { "sha": "e78e52036b845abe70bec42392c8ec588292521a", "tags": [ "v1.5.8" ], "timestamp": "20171001015957" }, "number": "v1.5.8" }, { "commit": { "sha": "6b83a45d5cfe959518f000efc207db9619c34071", "tags": [ "v1.5.9-beta.0" ], "timestamp": "20171001030940" }, "number": "v1.5.9" }, { "commit": { "sha": "2f8d9f9bae634c34b5f9e002d78f350a50650655", "tags": [ "v1.6.13" ], "timestamp": "20171118002643" }, "number": "v1.6.13" }, { "commit": { "sha": "fd84a0b721a56c090bcd7d4b06f44645709955ac", "tags": [ "v1.6.14-beta.0" ], "timestamp": "20171122221405" }, "number": "v1.6.14" }, { "commit": { "sha": "65bb45a3ea941924154f24a08a1462d5ff084121", "tags": [ "v1.9.0" ], "timestamp": "20171214202037" }, "number": "v1.9.0" }, { "commit": { "sha": "5cdc7fc16d431c7ac1e0cae13330e05ac8e97a41", "tags": [ "v1.9.4" ], "timestamp": "20180312170313" }, "number": "v1.9.4" }, { "commit": { "sha": "b12ed27fcb9bad9f7438af9c7855d27dd1d9d2fb", "tags": [ "v1.8.9" ], "timestamp": "20180312170558" }, "number": "v1.8.9" }, { "commit": { "sha": "962389e2049bfffd0447fb60346df471bc9863f2", "tags": [ "v1.7.14" ], "timestamp": "20180312170713" }, "number": "v1.7.14" } ] } ] }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.3.10", "versionStartIncluding": "1.3.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.4.12", "versionStartIncluding": "1.4.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.5.8", "versionStartIncluding": "1.5.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.6.13", "versionStartIncluding": "1.6.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.8.9", "versionStartIncluding": "1.8.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.7.14", "versionStartIncluding": "1.7.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.9.4", "versionStartIncluding": "1.9.0", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "security@kubernetes.io", "ID": "CVE-2017-1002101" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-59" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/kubernetes/kubernetes/issues/60813", "refsource": "CONFIRM", "tags": [ "Issue Tracking", "Mitigation", "Vendor Advisory" ], "url": "https://github.com/kubernetes/kubernetes/issues/60813" }, { "name": "RHSA-2018:0475", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2018:0475" }, { "name": "https://github.com/bgeesaman/subpath-exploit/", "refsource": "MISC", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://github.com/bgeesaman/subpath-exploit/" }, { "name": "openSUSE-SU-2020:0554", "refsource": "SUSE", "tags": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 5.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "version": "3.0" }, "exploitabilityScore": 3.1, "impactScore": 5.8 } }, "lastModifiedDate": "2019-10-09T23:21Z", "publishedDate": "2018-03-13T17:29Z" } } }
ghsa-rqgw-vh6p-qf7j
Vulnerability from github
Published
2022-05-13 01:38
Modified
2022-05-13 01:38
Severity ?
Details
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
{ "affected": [], "aliases": [ "CVE-2017-1002101" ], "database_specific": { "cwe_ids": [ "CWE-59" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-03-13T17:29:00Z", "severity": "CRITICAL" }, "details": "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host\u0027s filesystem.", "id": "GHSA-rqgw-vh6p-qf7j", "modified": "2022-05-13T01:38:23Z", "published": "2022-05-13T01:38:23Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1002101" }, { "type": "WEB", "url": "https://github.com/kubernetes/kubernetes/issues/60813" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2018:0475" }, { "type": "WEB", "url": "https://github.com/bgeesaman/subpath-exploit" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "type": "CVSS_V3" } ] }
rhsa-2018_0475
Vulnerability from csaf_redhat
Published
2018-03-12 19:40
Modified
2024-11-05 20:25
Summary
Red Hat Security Advisory: Red Hat OpenShift Container Platform security update
Notes
Topic
An update is now available for Red Hat OpenShift Container Platform 3.7, 3.6, 3.5, 3.4, and 3.3.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenShift Container Platform by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for this release. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2018:0476
All OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.
Security Fix(es):
* kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath (CVE-2017-1002101)
* pod: Malicious containers can delete any file from the node (CVE-2017-1002102)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat OpenShift Container Platform 3.7, 3.6, 3.5, 3.4, and 3.3.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenShift Container Platform by Red Hat is the company\u0027s cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the RPM packages for this release. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHBA-2018:0476\n\nAll OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.\n\nSecurity Fix(es):\n\n* kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath (CVE-2017-1002101)\n\n* pod: Malicious containers can delete any file from the node (CVE-2017-1002102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:0475", "url": "https://access.redhat.com/errata/RHSA-2018:0475" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1525130", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525130" }, { "category": "external", "summary": "1551818", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551818" }, { "category": "external", "summary": "1554174", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1554174" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0475.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenShift Container Platform security update", "tracking": { "current_release_date": "2024-11-05T20:25:38+00:00", "generator": { "date": "2024-11-05T20:25:38+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2018:0475", "initial_release_date": "2018-03-12T19:40:44+00:00", "revision_history": [ { "date": "2018-03-12T19:40:44+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-03-12T19:40:44+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:25:38+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.3", "product": { "name": "Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.3::el7" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.4", "product": { "name": "Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.4::el7" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.5", "product": { "name": "Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.5::el7" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.6", "product": { "name": "Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.6::el7" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.7", "product": { "name": "Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.7::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tuned-profiles-atomic-openshift-node@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product": { "name": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_id": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.3.1.46.11-1.git.4.e236015.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product": { "name": "tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_id": "tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tuned-profiles-atomic-openshift-node@3.4.1.44.38-1.git.4.bb8df08.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tuned-profiles-atomic-openshift-node@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product": { "name": "atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_id": "atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.5.5.31.48-1.git.4.ff6153e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-catalog@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-federation-services@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tuned-profiles-atomic-openshift-node@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-cluster-capacity@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product": { "name": "atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_id": "atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable@3.6.173.0.96-1.git.4.e6301f8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-federation-services@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tuned-profiles-atomic-openshift-node@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-template-service-broker@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-catalog@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-cluster-capacity@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product": { "name": "atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_id": "atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.7.23-1.git.5.83efd71.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "product": { "name": "atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "product_id": "atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder@3.3.1.46.11-1.git.4.e236015.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "product": { "name": "atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "product_id": "atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-excluder@3.3.1.46.11-1.git.4.e236015.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "product": { "name": "atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "product_id": "atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-excluder@3.4.1.44.38-1.git.4.bb8df08.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "product": { "name": "atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "product_id": "atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder@3.4.1.44.38-1.git.4.bb8df08.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "product": { "name": "atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "product_id": "atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-excluder@3.5.5.31.48-1.git.4.ff6153e.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "product": { "name": "atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "product_id": "atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder@3.5.5.31.48-1.git.4.ff6153e.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "product": { "name": "atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "product_id": "atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder@3.6.173.0.96-1.git.4.e6301f8.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "product": { "name": "atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "product_id": "atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-excluder@3.6.173.0.96-1.git.4.e6301f8.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "product": { "name": "atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "product_id": "atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-excluder@3.7.23-1.git.5.83efd71.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "product": { "name": "atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "product_id": "atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder@3.7.23-1.git.5.83efd71.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "product": { "name": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "product_id": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.3.1.46.11-1.git.4.e236015.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "product": { "name": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "product_id": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.4.1.44.38-1.git.4.bb8df08.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "product": { "name": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "product_id": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.5.5.31.48-1.git.4.ff6153e.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "product": { "name": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "product_id": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.6.173.0.96-1.git.4.e6301f8.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "product": { "name": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "product_id": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.7.23-1.git.5.83efd71.el7?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src" }, "product_reference": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch" }, "product_reference": "atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch" }, "product_reference": "atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.3", "product_id": "7Server-RH7-RHOSE-3.3:tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64" }, "product_reference": "tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src" }, "product_reference": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch" }, "product_reference": "atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch" }, "product_reference": "atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.4", "product_id": "7Server-RH7-RHOSE-3.4:tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64" }, "product_reference": "tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.4" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src" }, "product_reference": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch" }, "product_reference": "atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch" }, "product_reference": "atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.5", "product_id": "7Server-RH7-RHOSE-3.5:tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64" }, "product_reference": "tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.5" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src" }, "product_reference": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch" }, "product_reference": "atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch" }, "product_reference": "atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.6", "product_id": "7Server-RH7-RHOSE-3.6:tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64" }, "product_reference": "tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src" }, "product_reference": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch" }, "product_reference": "atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch" }, "product_reference": "atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.7", "product_id": "7Server-RH7-RHOSE-3.7:tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" }, "product_reference": "tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.7" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-1002101", "discovery_date": "2017-11-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1525130" } ], "notes": [ { "category": "description", "text": "It was found that volume security can be sidestepped with innocent emptyDir and subpath. This could give an attacker with access to a pod full control over the node host by gaining access to docker socket.", "title": "Vulnerability description" }, { "category": "summary", "text": "kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allows a pod to mount any part of the host filesystem. The pod will run with the security contraints placed on the user but could read anything with o=rx mode and appropriate SELinux label.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-1002101" }, { "category": "external", "summary": "RHBZ#1525130", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525130" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1002101", "url": "https://www.cve.org/CVERecord?id=CVE-2017-1002101" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1002101", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1002101" }, { "category": "external", "summary": "https://github.com/kubernetes/kubernetes/issues/60813", "url": "https://github.com/kubernetes/kubernetes/issues/60813" } ], "release_date": "2018-03-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-03-12T19:40:44+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath" }, { "acknowledgments": [ { "names": [ "Joel Smith" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2017-1002102", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)" }, "discovery_date": "2018-03-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1551818" } ], "notes": [ { "category": "description", "text": "This vulnerability allows containers using a secret, configMap, projected, or downwardAPI volume to trigger deletion of arbitrary files and directories on the nodes where they are running. An attacker could use this flaw to delete arbitrary file or directories on node host.", "title": "Vulnerability description" }, { "category": "summary", "text": "kubernetes: Malicious containers can delete any file from the node", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-1002102" }, { "category": "external", "summary": "RHBZ#1551818", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551818" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-1002102", "url": "https://www.cve.org/CVERecord?id=CVE-2017-1002102" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-1002102", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1002102" } ], "release_date": "2018-03-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-03-12T19:40:44+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:0475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.src", "7Server-RH7-RHOSE-3.3:atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-clients-redistributable-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-docker-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-dockerregistry-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-excluder-0:3.3.1.46.11-1.git.4.e236015.el7.noarch", "7Server-RH7-RHOSE-3.3:atomic-openshift-master-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-pod-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-sdn-ovs-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:atomic-openshift-tests-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.3:tuned-profiles-atomic-openshift-node-0:3.3.1.46.11-1.git.4.e236015.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.src", "7Server-RH7-RHOSE-3.4:atomic-openshift-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-clients-redistributable-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-docker-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-dockerregistry-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-excluder-0:3.4.1.44.38-1.git.4.bb8df08.el7.noarch", "7Server-RH7-RHOSE-3.4:atomic-openshift-master-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-pod-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-sdn-ovs-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:atomic-openshift-tests-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.4:tuned-profiles-atomic-openshift-node-0:3.4.1.44.38-1.git.4.bb8df08.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.src", "7Server-RH7-RHOSE-3.5:atomic-openshift-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-clients-redistributable-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-docker-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-dockerregistry-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-excluder-0:3.5.5.31.48-1.git.4.ff6153e.el7.noarch", "7Server-RH7-RHOSE-3.5:atomic-openshift-master-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-pod-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-sdn-ovs-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:atomic-openshift-tests-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.5:tuned-profiles-atomic-openshift-node-0:3.5.5.31.48-1.git.4.ff6153e.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.src", "7Server-RH7-RHOSE-3.6:atomic-openshift-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-clients-redistributable-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-cluster-capacity-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-docker-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-dockerregistry-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-excluder-0:3.6.173.0.96-1.git.4.e6301f8.el7.noarch", "7Server-RH7-RHOSE-3.6:atomic-openshift-federation-services-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-master-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-pod-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-sdn-ovs-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-service-catalog-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:atomic-openshift-tests-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.6:tuned-profiles-atomic-openshift-node-0:3.6.173.0.96-1.git.4.e6301f8.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.src", "7Server-RH7-RHOSE-3.7:atomic-openshift-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-clients-redistributable-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-cluster-capacity-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-docker-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-dockerregistry-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-excluder-0:3.7.23-1.git.5.83efd71.el7.noarch", "7Server-RH7-RHOSE-3.7:atomic-openshift-federation-services-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-master-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-pod-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-sdn-ovs-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-service-catalog-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-template-service-broker-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:atomic-openshift-tests-0:3.7.23-1.git.5.83efd71.el7.x86_64", "7Server-RH7-RHOSE-3.7:tuned-profiles-atomic-openshift-node-0:3.7.23-1.git.5.83efd71.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "kubernetes: Malicious containers can delete any file from the node" } ] }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.