RHSA-2020:0694: Moderate: OpenShift Container Platform 4.1.38 security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): openshift/mediawiki-apb: /etc/passwd is given incorrect privileges (CVE-2019-19345) openshift/mariadb-apb: /etc/passwd is given incorrect privileges (CVE-2019-19346) openshift/apb-base: /etc/passwd is given incorrect privileges (CVE-2019-19348) openshift/postgresql-apb: /etc/passwd is given incorrect privileges (CVE-2020-1707) openshift/mysql-apb: /etc/passwd is given incorrect privileges (CVE-2020-1708) openshift/mediawiki: /etc/passwd is given incorrect privileges (CVE-2020-1709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.1.38
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0694?
RHSA-2020:0694 has been rated with medium severity due to its impact on file permission handling.
What vulnerabilities are addressed in RHSA-2020:0694?
RHSA-2020:0694 addresses the privilege misconfiguration of /etc/passwd related to CVE-2019-19345.
How do I fix RHSA-2020:0694?
To fix RHSA-2020:0694, update the OpenShift Container Platform to the latest version that includes the security patch.
What software is affected by RHSA-2020:0694?
RHSA-2020:0694 affects the Red Hat OpenShift Container Platform specifically related to the mediawiki-apb image.
Is there a workaround for RHSA-2020:0694?
Currently, there are no documented workarounds for the vulnerabilities addressed in RHSA-2020:0694.