Bug 1368900

Summary: RHSA-2016:1626: python security update (Moderate)
Product: Red Hat Enterprise Linux 7 Reporter: Alex Jia <ajia>
Component: kubernetes-controller-mgr-dockerAssignee: Solly Ross <sross>
Status: CLOSED CURRENTRELEASE QA Contact: atomic-bugs <atomic-bugs>
Severity: medium Docs Contact:
Priority: high    
Version: 7.4Keywords: Extras
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-10-03 19:16:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Alex Jia 2016-08-22 04:23:44 UTC
Description of problem:
atomic scan founds issue "RHSA-2016:1626: python security update" on on latest registry.access.redhat.com/rhel7/kubernetes-controller-mgr (sha256:d523b187).

Version-Release number of selected component (if applicable):
[cloud-user@atomic-00 ~]$ cat /etc/redhat-release 
Red Hat Enterprise Linux Atomic Host release 7.2

[cloud-user@atomic-00 ~]$ sudo atomic host status
State: idle
Deployments:
● rhel-atomic-host:rhel-atomic-host/7/x86_64/standard
       Version: 7.2.6-1 (2016-08-18 16:01:03)
        Commit: dae35767902aad07b087d359be20f234d244da79fdd4734cd2fbc3ee39b12cf8
        OSName: rhel-atomic-host

[cloud-user@atomic-00 ~]$ rpm -q atomic docker
atomic-1.10.5-7.el7.x86_64
docker-1.10.3-46.el7.10.x86_64


How reproducible:
always

Steps to Reproduce:
1. docker pull 
2. atomic scan --verbose


Actual results:

registry.access.redhat.com/rhel7/kubernetes-controller-mgr (sha256:d523b187)

The following issues were found:

     RHSA-2016:1626: python security update (Moderate)
     Severity: Moderate
       RHSA URL: https://rhn.redhat.com/errata/RHSA-2016-1626.html
       RHSA ID: RHSA-2016:1626-00
       Associated CVEs:
           CVE ID: CVE-2016-0772
           CVE URL: https://access.redhat.com/security/cve/CVE-2016-0772
           CVE ID: CVE-2016-1000110
           CVE URL: https://access.redhat.com/security/cve/CVE-2016-1000110
           CVE ID: CVE-2016-5699
           CVE URL: https://access.redhat.com/security/cve/CVE-2016-5699


Expected results:


Additional info: