{"id":"RHSA-2019:0408","summary":"Red Hat Security Advisory: OpenShift Container Platform 3.4, 3.5, 3.6, and 3.7 security update","modified":"2025-11-22T11:39:51Z","published":"2024-09-13T14:07:52Z","upstream":["CVE-2019-5736"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:0408"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664908"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0408.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2019-5736"},{"type":"ARTICLE","url":"https://access.redhat.com/security/vulnerabilities/runcescape"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2019-5736"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5736"},{"type":"ARTICLE","url":"https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html"},{"type":"ARTICLE","url":"https://seclists.org/oss-sec/2019/q1/119"}],"affected":[{"package":{"name":"docker","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-client","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-common","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-debuginfo","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-logrotate","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-logrotate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-lvm-plugin","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-lvm-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-novolume-plugin","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-novolume-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-rhel-push-plugin","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-rhel-push-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-unit-test","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-unit-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-v1.10-migrator","ecosystem":"Red Hat:openshift:3.4::el7","purl":"pkg:rpm/redhat/docker-v1.10-migrator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-client","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-common","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-debuginfo","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-logrotate","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-logrotate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-lvm-plugin","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-lvm-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-novolume-plugin","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-novolume-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-rhel-push-plugin","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-rhel-push-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-unit-test","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-unit-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-v1.10-migrator","ecosystem":"Red Hat:openshift:3.5::el7","purl":"pkg:rpm/redhat/docker-v1.10-migrator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-client","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-common","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-debuginfo","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-logrotate","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-logrotate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-lvm-plugin","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-lvm-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-novolume-plugin","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-novolume-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-rhel-push-plugin","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-rhel-push-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-unit-test","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-unit-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-v1.10-migrator","ecosystem":"Red Hat:openshift:3.6::el7","purl":"pkg:rpm/redhat/docker-v1.10-migrator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-client","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-common","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-debuginfo","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-logrotate","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-logrotate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-lvm-plugin","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-lvm-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-novolume-plugin","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-novolume-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-rhel-push-plugin","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-rhel-push-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-unit-test","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-unit-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}},{"package":{"name":"docker-v1.10-migrator","ecosystem":"Red Hat:openshift:3.7::el7","purl":"pkg:rpm/redhat/docker-v1.10-migrator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2019:0408.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H"}]}