Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Red Hat Quay 3.2.0 Security Update Moderate Risk: RHSA-2019-4341

red hat
Calendar Grey December 19, 2019
Dist Redhat Esm H88
The release of Red Hat Quay 3.2.0 tackles several moderate vulnerabilities and software defects. Ensure to pull images for necessary security patches.
An update is now available for Red Hat Quay 3

Solution

Please download the release images via:

quay.io/redhat/quay:v3.2.0 quay.io/redhat/clair-jwt:v3.2.0 quay.io/redhat/quay-builder:v3.2.0

Summary

Quay 3.2.0 release, including:
Security Fix(es):
* quay: Red Hat Quay stores robot account tokens in plain text (CVE-2019-10205)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Quay 3.2.0 errata (BZ#1780711)

Topics%20covered

Topics Covered

security advisory moderate security issue Red Hat bug fix security impact Red Hat Quay

References

https://access.redhat.com/security/cve/CVE-2019-10205 https://access.redhat.com/security/updates/classification/#moderate

Package List


Advisory ID: RHSA-2019:4341-01
Product: Red Hat Quay
Advisory URL: https://access.redhat.com/errata/RHSA-2019:4341
Issue date: 2019-12-19

Topic

An update is now available for Red Hat Quay 3.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory moderate security issue Red Hat bug fix security impact Red Hat Quay

Relevant Releases Architectures

Bugs Fixed

1732190 - CVE-2019-10205 quay: Red Hat Quay stores robot account tokens in plain text

1780711 - Quay 3.2.0 errata

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here