RHSA-2020:0689: Moderate: OpenShift Container Platform 4.2.22 skopeo security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): proglottis/gpgme: Use-after-free vulnerability was found in GPGME bindings during container image pull (CVE-2020-8945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/skopeoto a version that resolves this vulnerability.Fixed in 0.1.32-7.git1715c90.rhaos4.2.el8 - Upgrade
Upgrade
redhat/containers-commonto a version that resolves this vulnerability.Fixed in 0.1.32-7.git1715c90.rhaos4.2.el8 - Upgrade
Upgrade
redhat/skopeo-debuginfoto a version that resolves this vulnerability.Fixed in 0.1.32-7.git1715c90.rhaos4.2.el8 - Upgrade
Upgrade
redhat/skopeo-debugsourceto a version that resolves this vulnerability.Fixed in 0.1.32-7.git1715c90.rhaos4.2.el8 - Upgrade
Upgrade
Red Hat OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.2.22
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0689?
The severity of RHSA-2020:0689 is classified as moderate.
How do I fix RHSA-2020:0689?
To fix RHSA-2020:0689, update the affected packages to version 0.1.32-7.git1715c90.rhaos4.2.el8.
Which packages are affected by RHSA-2020:0689?
The affected packages for RHSA-2020:0689 include skopeo and containers-common among others.
What vulnerability is addressed in RHSA-2020:0689?
RHSA-2020:0689 addresses a use-after-free vulnerability found in GPGME bindings.
Is it essential to apply the update for RHSA-2020:0689?
Yes, it is essential to apply the update for RHSA-2020:0689 to mitigate potential security risks.