Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity update

Red Hat Quay v3.3.1 Moderate Advisory: RHSA-2020:3525-01

An update is now available for Red Hat Quay 3.3 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat Quay v3.3.1 security update Advisory ID: RHSA-2020:3525-01 Product: Red Hat Quay Advisory URL: https://access.redhat.com/errata/RHSA-2020:3525 Issue date: 2020-08-19 CVE Names: CVE-2020-11080 CVE-2020-12049 CVE-2020-13777 CVE-2020-14313 ==================================================================== 1. Summary: An update is now available for Red Hat Quay 3.3 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Quay 3.3.1 release, including: Security Fix(es): * quay: build triggers can disclose robot account names and existence of private repos within namespaces (CVE-2020-14313) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Quay 3.3.1 release (BZ#1844197) 3. Solution: Please download the release images via: quay.io/redhat/quay:v3.3.1 quay.io/redhat/clair-jwt:v3.3.1 quay.io/redhat/quay-builder:v3.3.1 quay.io/redhat/clair:v3.3.1 4. Bugs fixed (https://bugzilla.redhat.com/): 1844197 - Quay 3.3.1 release 1853026 - CVE-2020-14313 quay: build triggers can disclose robot account names and existence of private repos within namespaces 5.References: https://access.redhat.com/security/cve/CVE-2020-11080 https://access.redhat.com/security/cve/CVE-2020-12049 https://access.redhat.com/security/cve/CVE-2020-13777 https://access.redhat.com/security/cve/CVE-2020-14313 https://access.redhat.com/security/updates/classification#moderate 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXz2DLtzjgjWX9erEAQgKTQ//ZWalbNInEMkeuOG5U/oCn1WfwdAQ1B8f o7UO4iTdSZUyscTCvOtojej15lQ5C0mGd+FobFwy1dvR7T1U591samEI8wybPLgy TFwrvGsqygF1hnCuQENw1/ztHnX5MRjhbRldtKl4WJXf3EGCA1ovJlBoaC5lxnwD fNzr2l0bPlBZXV5hjka21tdBWmhL40JU9NYPp0Tfh8QM9JJgQ9h4BiYIS/xp3hOj wu4RUqpsz5QuDBhChHxsyyyAwTyg5ipXmH1TkB/OF5HrkYsPFn3mXDAZlKnmZSJ9 zElgXqjUsNFlepr8BTY4J2/szxT/fQYO7B2rFjPVgXfxcxhl8yC2fVkupb2HagOS gsobpVUwYiskuTyc4MbHsFK1MRgnRLYIHxpFEzEmmJbsWiyDjLxF7EJ80e1XxPNJ CidpIKpYXzdE+UzEmzGswscapL5Jx2Amf5y3QQ/Ta6cShW5d68rlI5HFpZDYsP/7 KvM8AZPFLvHvpcGtTTcpq5R+gTObgMsoujEn70g3XgdYIpGrE5Wd2BA+qgR8tVlj cwxRRw2KR78E1ywPjfRUFRcOtVPSfTN5hQQrHY2smjuyfUXQlLAUEADdy8DKP9kP hedF0qHB0zQr1WpKCxM5qGauRBzo3iIaN1Yi/3KAmUZ599/GUJi+ygrRxwfUu9Sg sQg15utUNNg=g4y9 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . OpenShift Container Platform v4.10.2 maintenance update classified as significant with comprehensive bulletin information and resolutions for various vulnerabilities.. Red Hat Quay Security Update, Moderate Advisory for Red Hat Quay, Software Update for Quay, Security Fix for Quay 3.3.1. . LinuxSecurity.com Team

Aug 19, 2020 Red Hat