RHSA-2019:2594: Important: OpenShift Container Platform 4.1.14 security and bug fix update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.This advisory contains the container images for Red HatOpenShift Container Platform 4.1.14. All container images have been rebuilt with updated versions of golang. See the following advisory for theRPM packages for this release:https://access.redhat.com/errata/RHBA-2019:2660 Security Fix(es): HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512) HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.This release also includes the following bugs: Previously, users would see an error in the web console when navigating to the ClusterResourceQuota instances from the CRD list. The problem has been fixed, and you can now successfully list ClusterResourceQuota instances from the CRD page. (BZ#1743259) Space precludes documenting all of the container images in this advisory.See the following Release Notes documentation, which will be updatedshortly for this release, for details about these changes:https://docs.openshift.com/container-platform/4.1/releasenotes/ocp-4-1-rel ease-notes.htmlYou may download the oc tool and use it to inspect release image metadataas follows:$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.1.14The image digest is sha256:fd41c9bda9e0ff306954f1fd7af6428edff8c3989b75f9fe984968db66846231All OpenShift Container Platform 4.1 users are advised to upgrade to theseupdated packages and images.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.1.14
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:2594?
The severity of RHSA-2019:2594 is classified as moderate.
How do I fix RHSA-2019:2594?
To fix RHSA-2019:2594, you should update to Red Hat OpenShift Container Platform 4.1.14 or later.
What vulnerabilities are addressed in RHSA-2019:2594?
RHSA-2019:2594 addresses multiple vulnerabilities affecting Red Hat OpenShift Container Platform.
Who is affected by RHSA-2019:2594?
RHSA-2019:2594 affects users of Red Hat OpenShift Container Platform version 4.1.14.
What is Red Hat OpenShift Container Platform?
Red Hat OpenShift Container Platform is a cloud computing Kubernetes application platform for on-premise or private cloud deployments.