First published: Tue Mar 10 2020(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.<br>Security Fix(es):<br><li> openshift/mariadb-apb: /etc/passwd was given incorrect privileges (CVE-2019-19346)</li> <li> openshift/apb-base: /etc/passwd was given incorrect privileges (CVE-2019-19348)</li> <li> openshift/postgresql-apb: /etc/passwd was given incorrect privileges (CVE-2020-1707)</li> <li> openshift/mysql-apb: /etc/passwd was given incorrect privileges (CVE-2020-1708)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:0681 is categorized as moderate.
To fix RHSA-2020:0681, you need to update the affected packages to the latest available version as provided by Red Hat.
RHSA-2020:0681 addresses vulnerabilities related to incorrect privileges being assigned to /etc/passwd in openshift/mariadb-apb, specifically CVE-2019-19346.
RHSA-2020:0681 affects Red Hat OpenShift Container Platform deployments that use the specified mariadb-ansible playbook.
There are no specific workarounds for RHSA-2020:0681; applying the recommended updates is advised.