HighFix available
Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update
Type: advisorySources: OSV
- Products
- atomic-enterprise-service-catalog, atomic-enterprise-service-catalog-svcat, atomic-openshift-cluster-autoscaler, atomic-openshift-descheduler, atomic-openshift-metrics-server, atomic-openshift-node-problem-detector, atomic-openshift-service-idler, atomic-openshift-web-console, cockpit, cockpit-debuginfo, cockpit-kubernetes, csi-attacher, csi-attacher-debuginfo, csi-driver-registrar, csi-driver-registrar-debuginfo, csi-livenessprobe, csi-livenessprobe-debuginfo, csi-provisioner, csi-provisioner-debuginfo, golang-github-openshift-oauth-proxy, golang-github-openshift-prometheus-alert-buffer, golang-github-prometheus-alertmanager, golang-github-prometheus-node_exporter, golang-github-prometheus-prometheus, hawkular-openshift-agent, heapster, image-inspector, openshift-enterprise-autoheal, openshift-enterprise-cluster-capacity, openshift-eventrouter, openshift-eventrouter-debuginfo, openshift-external-storage, openshift-external-storage-cephfs-provisioner, openshift-external-storage-debuginfo, openshift-external-storage-efs-provisioner, openshift-external-storage-local-provisioner, openshift-external-storage-manila-provisioner, openshift-external-storage-snapshot-controller, openshift-external-storage-snapshot-provisioner, prometheus, prometheus-alertmanager, prometheus-node-exporter
- Affected versions
- Not specified
- Fixed versions
- 0:0-3.gitceca8c1.el7, 0:0.0.1-2.gitff5b6a0.el7, 0:0.0.2-9.gitd3c94f0.el7, 0:0.2-4.git7c289cc.el7, 0:0.2.0-2.el7, 0:0.2.0-3.el7, 0:0.2.0-4.git27299be.el7, 0:1.2.2-3.el7, 0:1.3.0-4.el7, 0:195-2.rhaos.el7, 0:2.4.0-4.el7, 0:3.11.154-1.git.1.13199be.el7, 0:3.11.154-1.git.1.148db48.el7, 0:3.11.154-1.git.1.1d31032.el7, 0:3.11.154-1.git.1.220e3dc.el7, 0:3.11.154-1.git.1.4acd2e6.el7, 0:3.11.154-1.git.1.532da7a.el7, 0:3.11.154-1.git.1.5798c2c.el7, 0:3.11.154-1.git.1.5e8e065.el7, 0:3.11.154-1.git.1.6a6b6ce.el7, 0:3.11.154-1.git.1.bc9f224.el7, 0:3.11.154-1.git.1.f54cb18.el7, 0:3.11.154-1.git.1.f80fb86.el7, 1:3.11.154-1.git.1.fa68ced.el7
- CVEs
- CVE-2019-9512, CVE-2019-9514
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 09:05 UTC · Revision 1
Source evidence
Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update
core-osv · Original sourcePublished 20 Sept 2024, 13:54 UTC
Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update
osv:RHSA-2019:3906
atomic-enterprise-service-catalog
Fixed versions: 1:3.11.154-1.git.1.fa68ced.el7
atomic-enterprise-service-catalog-svcat
Fixed versions: 1:3.11.154-1.git.1.fa68ced.el7
atomic-openshift-cluster-autoscaler
Fixed versions: 0:3.11.154-1.git.1.532da7a.el7
atomic-openshift-descheduler
Fixed versions: 0:3.11.154-1.git.1.1d31032.el7
atomic-openshift-metrics-server
Fixed versions: 0:3.11.154-1.git.1.6a6b6ce.el7
atomic-openshift-node-problem-detector
Fixed versions: 0:3.11.154-1.git.1.5e8e065.el7
atomic-openshift-service-idler
Fixed versions: 0:3.11.154-1.git.1.f80fb86.el7
atomic-openshift-web-console
Fixed versions: 0:3.11.154-1.git.1.f54cb18.el7
cockpit
Fixed versions: 0:195-2.rhaos.el7
cockpit-debuginfo
Fixed versions: 0:195-2.rhaos.el7
cockpit-kubernetes
Fixed versions: 0:195-2.rhaos.el7
csi-attacher
Fixed versions: 0:0.2.0-4.git27299be.el7
csi-attacher-debuginfo
Fixed versions: 0:0.2.0-4.git27299be.el7
csi-driver-registrar
Fixed versions: 0:0.2.0-2.el7
csi-driver-registrar-debuginfo
Fixed versions: 0:0.2.0-2.el7
csi-livenessprobe
Fixed versions: 0:0.0.1-2.gitff5b6a0.el7
csi-livenessprobe-debuginfo
Fixed versions: 0:0.0.1-2.gitff5b6a0.el7
csi-provisioner
Fixed versions: 0:0.2.0-3.el7
csi-provisioner-debuginfo
Fixed versions: 0:0.2.0-3.el7
golang-github-openshift-oauth-proxy
Fixed versions: 0:3.11.154-1.git.1.220e3dc.el7
golang-github-openshift-prometheus-alert-buffer
Fixed versions: 0:0-3.gitceca8c1.el7
golang-github-prometheus-alertmanager
Fixed versions: 0:3.11.154-1.git.1.4acd2e6.el7
golang-github-prometheus-node_exporter
Fixed versions: 0:3.11.154-1.git.1.bc9f224.el7
golang-github-prometheus-prometheus
Fixed versions: 0:3.11.154-1.git.1.148db48.el7
hawkular-openshift-agent
Fixed versions: 0:1.2.2-3.el7
heapster
Fixed versions: 0:1.3.0-4.el7
image-inspector
Fixed versions: 0:2.4.0-4.el7
openshift-enterprise-autoheal
Fixed versions: 0:3.11.154-1.git.1.13199be.el7
openshift-enterprise-cluster-capacity
Fixed versions: 0:3.11.154-1.git.1.5798c2c.el7
openshift-eventrouter
Fixed versions: 0:0.2-4.git7c289cc.el7
openshift-eventrouter-debuginfo
Fixed versions: 0:0.2-4.git7c289cc.el7
openshift-external-storage
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
openshift-external-storage-cephfs-provisioner
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
openshift-external-storage-debuginfo
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
openshift-external-storage-efs-provisioner
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
openshift-external-storage-local-provisioner
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
openshift-external-storage-manila-provisioner
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
openshift-external-storage-snapshot-controller
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
openshift-external-storage-snapshot-provisioner
Fixed versions: 0:0.0.2-9.gitd3c94f0.el7
prometheus
Fixed versions: 0:3.11.154-1.git.1.148db48.el7
prometheus-alertmanager
Fixed versions: 0:3.11.154-1.git.1.4acd2e6.el7
prometheus-node-exporter
Fixed versions: 0:3.11.154-1.git.1.bc9f224.el7
Complete source record
{
"id": "5434eb616c8f07d6d420dd69babbf69c20431193d2af70220456d7bbf8ed6d33",
"url": "https://osv.dev/vulnerability/RHSA-2019%3A3906",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update",
"summary": "Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update",
"evidence": "osv:RHSA-2019:3906",
"products": [
{
"name": {
"value": "atomic-enterprise-service-catalog",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:3.11.154-1.git.1.fa68ced.el7",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "atomic-enterprise-service-catalog-svcat",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:3.11.154-1.git.1.fa68ced.el7",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "atomic-openshift-cluster-autoscaler",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.532da7a.el7",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "atomic-openshift-descheduler",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.1d31032.el7",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "atomic-openshift-metrics-server",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.6a6b6ce.el7",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "atomic-openshift-node-problem-detector",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.5e8e065.el7",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "atomic-openshift-service-idler",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.f80fb86.el7",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "atomic-openshift-web-console",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.f54cb18.el7",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cockpit",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:195-2.rhaos.el7",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cockpit-debuginfo",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:195-2.rhaos.el7",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cockpit-kubernetes",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:195-2.rhaos.el7",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-attacher",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2.0-4.git27299be.el7",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-attacher-debuginfo",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2.0-4.git27299be.el7",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-driver-registrar",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2.0-2.el7",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-driver-registrar-debuginfo",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2.0-2.el7",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-livenessprobe",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.1-2.gitff5b6a0.el7",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-livenessprobe-debuginfo",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.1-2.gitff5b6a0.el7",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-provisioner",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2.0-3.el7",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "csi-provisioner-debuginfo",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2.0-3.el7",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "golang-github-openshift-oauth-proxy",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.220e3dc.el7",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "golang-github-openshift-prometheus-alert-buffer",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0-3.gitceca8c1.el7",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "golang-github-prometheus-alertmanager",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.4acd2e6.el7",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "golang-github-prometheus-node_exporter",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.bc9f224.el7",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "golang-github-prometheus-prometheus",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.148db48.el7",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "hawkular-openshift-agent",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.2.2-3.el7",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "heapster",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.3.0-4.el7",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "image-inspector",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.0-4.el7",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-enterprise-autoheal",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.13199be.el7",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-enterprise-cluster-capacity",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.5798c2c.el7",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-eventrouter",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2-4.git7c289cc.el7",
"evidence": "/affected/29/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-eventrouter-debuginfo",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.2-4.git7c289cc.el7",
"evidence": "/affected/30/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage",
"evidence": "/affected/31/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/31/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage-cephfs-provisioner",
"evidence": "/affected/32/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/32/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage-debuginfo",
"evidence": "/affected/33/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/33/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage-efs-provisioner",
"evidence": "/affected/34/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/34/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage-local-provisioner",
"evidence": "/affected/35/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/35/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage-manila-provisioner",
"evidence": "/affected/36/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/36/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage-snapshot-controller",
"evidence": "/affected/37/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/37/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-external-storage-snapshot-provisioner",
"evidence": "/affected/38/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.0.2-9.gitd3c94f0.el7",
"evidence": "/affected/38/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "prometheus",
"evidence": "/affected/39/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.148db48.el7",
"evidence": "/affected/39/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "prometheus-alertmanager",
"evidence": "/affected/40/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.4acd2e6.el7",
"evidence": "/affected/40/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "prometheus-node-exporter",
"evidence": "/affected/41/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.11.154-1.git.1.bc9f224.el7",
"evidence": "/affected/41/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2019:3906",
"aliases": [
"RHSA-2019:3906"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.11.154-1.git.1.fa68ced.el7"
}
]
}
],
"package": {
"name": "atomic-enterprise-service-catalog",
"purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.11.154-1.git.1.fa68ced.el7"
}
]
}
],
"package": {
"name": "atomic-enterprise-service-catalog-svcat",
"purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog-svcat",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.532da7a.el7"
}
]
}
],
"package": {
"name": "atomic-openshift-cluster-autoscaler",
"purl": "pkg:rpm/redhat/atomic-openshift-cluster-autoscaler",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.1d31032.el7"
}
]
}
],
"package": {
"name": "atomic-openshift-descheduler",
"purl": "pkg:rpm/redhat/atomic-openshift-descheduler",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.6a6b6ce.el7"
}
]
}
],
"package": {
"name": "atomic-openshift-metrics-server",
"purl": "pkg:rpm/redhat/atomic-openshift-metrics-server",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.5e8e065.el7"
}
]
}
],
"package": {
"name": "atomic-openshift-node-problem-detector",
"purl": "pkg:rpm/redhat/atomic-openshift-node-problem-detector",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.f80fb86.el7"
}
]
}
],
"package": {
"name": "atomic-openshift-service-idler",
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.f54cb18.el7"
}
]
}
],
"package": {
"name": "atomic-openshift-web-console",
"purl": "pkg:rpm/redhat/atomic-openshift-web-console",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:195-2.rhaos.el7"
}
]
}
],
"package": {
"name": "cockpit",
"purl": "pkg:rpm/redhat/cockpit",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:195-2.rhaos.el7"
}
]
}
],
"package": {
"name": "cockpit-debuginfo",
"purl": "pkg:rpm/redhat/cockpit-debuginfo",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:195-2.rhaos.el7"
}
]
}
],
"package": {
"name": "cockpit-kubernetes",
"purl": "pkg:rpm/redhat/cockpit-kubernetes",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2.0-4.git27299be.el7"
}
]
}
],
"package": {
"name": "csi-attacher",
"purl": "pkg:rpm/redhat/csi-attacher",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2.0-4.git27299be.el7"
}
]
}
],
"package": {
"name": "csi-attacher-debuginfo",
"purl": "pkg:rpm/redhat/csi-attacher-debuginfo",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2.0-2.el7"
}
]
}
],
"package": {
"name": "csi-driver-registrar",
"purl": "pkg:rpm/redhat/csi-driver-registrar",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2.0-2.el7"
}
]
}
],
"package": {
"name": "csi-driver-registrar-debuginfo",
"purl": "pkg:rpm/redhat/csi-driver-registrar-debuginfo",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.1-2.gitff5b6a0.el7"
}
]
}
],
"package": {
"name": "csi-livenessprobe",
"purl": "pkg:rpm/redhat/csi-livenessprobe",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.1-2.gitff5b6a0.el7"
}
]
}
],
"package": {
"name": "csi-livenessprobe-debuginfo",
"purl": "pkg:rpm/redhat/csi-livenessprobe-debuginfo",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2.0-3.el7"
}
]
}
],
"package": {
"name": "csi-provisioner",
"purl": "pkg:rpm/redhat/csi-provisioner",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2.0-3.el7"
}
]
}
],
"package": {
"name": "csi-provisioner-debuginfo",
"purl": "pkg:rpm/redhat/csi-provisioner-debuginfo",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.220e3dc.el7"
}
]
}
],
"package": {
"name": "golang-github-openshift-oauth-proxy",
"purl": "pkg:rpm/redhat/golang-github-openshift-oauth-proxy",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0-3.gitceca8c1.el7"
}
]
}
],
"package": {
"name": "golang-github-openshift-prometheus-alert-buffer",
"purl": "pkg:rpm/redhat/golang-github-openshift-prometheus-alert-buffer",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.4acd2e6.el7"
}
]
}
],
"package": {
"name": "golang-github-prometheus-alertmanager",
"purl": "pkg:rpm/redhat/golang-github-prometheus-alertmanager",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.bc9f224.el7"
}
]
}
],
"package": {
"name": "golang-github-prometheus-node_exporter",
"purl": "pkg:rpm/redhat/golang-github-prometheus-node_exporter",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.148db48.el7"
}
]
}
],
"package": {
"name": "golang-github-prometheus-prometheus",
"purl": "pkg:rpm/redhat/golang-github-prometheus-prometheus",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.2.2-3.el7"
}
]
}
],
"package": {
"name": "hawkular-openshift-agent",
"purl": "pkg:rpm/redhat/hawkular-openshift-agent",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.3.0-4.el7"
}
]
}
],
"package": {
"name": "heapster",
"purl": "pkg:rpm/redhat/heapster",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.0-4.el7"
}
]
}
],
"package": {
"name": "image-inspector",
"purl": "pkg:rpm/redhat/image-inspector",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.13199be.el7"
}
]
}
],
"package": {
"name": "openshift-enterprise-autoheal",
"purl": "pkg:rpm/redhat/openshift-enterprise-autoheal",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.5798c2c.el7"
}
]
}
],
"package": {
"name": "openshift-enterprise-cluster-capacity",
"purl": "pkg:rpm/redhat/openshift-enterprise-cluster-capacity",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2-4.git7c289cc.el7"
}
]
}
],
"package": {
"name": "openshift-eventrouter",
"purl": "pkg:rpm/redhat/openshift-eventrouter",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.2-4.git7c289cc.el7"
}
]
}
],
"package": {
"name": "openshift-eventrouter-debuginfo",
"purl": "pkg:rpm/redhat/openshift-eventrouter-debuginfo",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage",
"purl": "pkg:rpm/redhat/openshift-external-storage",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage-cephfs-provisioner",
"purl": "pkg:rpm/redhat/openshift-external-storage-cephfs-provisioner",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage-debuginfo",
"purl": "pkg:rpm/redhat/openshift-external-storage-debuginfo",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage-efs-provisioner",
"purl": "pkg:rpm/redhat/openshift-external-storage-efs-provisioner",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage-local-provisioner",
"purl": "pkg:rpm/redhat/openshift-external-storage-local-provisioner",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage-manila-provisioner",
"purl": "pkg:rpm/redhat/openshift-external-storage-manila-provisioner",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage-snapshot-controller",
"purl": "pkg:rpm/redhat/openshift-external-storage-snapshot-controller",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.0.2-9.gitd3c94f0.el7"
}
]
}
],
"package": {
"name": "openshift-external-storage-snapshot-provisioner",
"purl": "pkg:rpm/redhat/openshift-external-storage-snapshot-provisioner",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.148db48.el7"
}
]
}
],
"package": {
"name": "prometheus",
"purl": "pkg:rpm/redhat/prometheus",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.4acd2e6.el7"
}
]
}
],
"package": {
"name": "prometheus-alertmanager",
"purl": "pkg:rpm/redhat/prometheus-alertmanager",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.11.154-1.git.1.bc9f224.el7"
}
]
}
],
"package": {
"name": "prometheus-node-exporter",
"purl": "pkg:rpm/redhat/prometheus-node-exporter",
"ecosystem": "Red Hat:openshift:3.11::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2019:3906.json"
}
}
],
"modified": "2026-10-13T10:01:29Z",
"provider": "osv",
"upstream": [
"CVE-2019-9512",
"CVE-2019-9514"
],
"references": [
"https://access.redhat.com/errata/RHSA-2019:3906",
"https://access.redhat.com/security/updates/classification/#important",
"https://bugzilla.redhat.com/show_bug.cgi?id=1735645",
"https://bugzilla.redhat.com/show_bug.cgi?id=1735744",
"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3906.json",
"https://access.redhat.com/security/cve/CVE-2019-9512",
"https://www.cve.org/CVERecord?id=CVE-2019-9512",
"https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
"https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
"https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
"https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
"https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
"https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
"https://access.redhat.com/security/cve/CVE-2019-9514",
"https://www.cve.org/CVERecord?id=CVE-2019-9514",
"https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
]
},
"related_cves": [
{
"value": "CVE-2019-9512",
"evidence": "/upstream"
},
{
"value": "CVE-2019-9514",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 307639,
"published_at": "2024-09-20T13:54:11+00:00"
}