First published: Tue Mar 24 2020(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat OpenShift Container Platform for IBM LinuxONE |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:0863 is classified as moderate.
RHSA-2020:0863 addresses a use-after-free vulnerability in GPGME bindings during container image pulls.
To fix RHSA-2020:0863, update your Red Hat OpenShift Container Platform to the latest patched version.
RHSA-2020:0863 affects specific versions of Red Hat OpenShift Container Platform, but exact versions can be found in the advisory.
Currently, there are no documented workarounds for the vulnerability addressed by RHSA-2020:0863.