RHSA-2013:0220High

Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1 update

Published
January 31, 2013
Last Modified
June 27, 2026

🔗 CVE IDs covered (7)

CVE-2012-5658 →CVE-2012-6072 →CVE-2012-6073 →CVE-2012-6074 →CVE-2012-6496 →CVE-2013-0158 →CVE-2013-0164 →

📋 Description

CVE-2012-5658 — Origin: rhc-chk.rb password exposure in log files CVE-2012-6072 — Jenkins: HTTP response splitting CVE-2012-6073 — Jenkins: open redirect CVE-2012-6074 — Jenkins: cross-site scripting vulnerability CVE-2012-6496 — rubygem-activerecord: find_by_* SQL Injection CVE-2013-0158 — jenkins: remote unauthenticated retrieval of master cryptographic key (Jenkins Security Advisory 2013-01-04) CVE-2013-0164 — openshift-origin-port-proxy: openshift-port-proxy-cfg lockwrap() tmp file creation

🎯 Affected products72

  • Red Hat OpenShift Enterprise Client Tools
  • Red Hat OpenShift Enterprise Infrastructure
  • Red Hat OpenShift Enterprise Node
  • jenkins-0:1.498-1.1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node
  • jenkins-0:1.498-1.1.el6op.src as a component of Red Hat OpenShift Enterprise Node
  • libmongodb-0:2.0.2-6.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure
  • mongodb-0:2.0.2-6.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure
  • mongodb-0:2.0.2-6.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure
  • mongodb-debuginfo-0:2.0.2-6.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure
  • mongodb-devel-0:2.0.2-6.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure
  • mongodb-server-0:2.0.2-6.el6op.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure
  • openshift-console-0:0.0.13-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure
  • openshift-console-0:0.0.13-2.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure
  • openshift-origin-broker-0:1.0.10-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure
  • openshift-origin-broker-0:1.0.10-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure
  • openshift-origin-broker-util-0:1.0.14-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure
  • openshift-origin-broker-util-0:1.0.14-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure
  • openshift-origin-cartridge-haproxy-1.4-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-cartridge-haproxy-1.4-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-cartridge-ruby-1.8-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-cartridge-ruby-1.8-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-cartridge-ruby-1.9-scl-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-cartridge-ruby-1.9-scl-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-msg-node-mcollective-0:1.0.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-msg-node-mcollective-0:1.0.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-node-util-0:1.0.7-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-node-util-0:1.0.7-1.el6op.src as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-port-proxy-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node
  • openshift-origin-port-proxy-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node
  • rhc-0:1.3.2-1.3.el6op.noarch as a component of Red Hat OpenShift Enterprise Client Tools
  • +42 more not shown

✅ Remediation

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

🔗 References (46)