RHSA-2020:0863: Moderate: OpenShift Container Platform 4.3.8 proglottis/gpgme security update

Published Mar 24, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Container Platform

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenShift Container Platform to a version that resolves this vulnerability.
Fixed in 4.3.8

Event History

Mar 24, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:0863?

The severity of RHSA-2020:0863 is classified as moderate.

What is RHSA-2020:0863 related to?

RHSA-2020:0863 addresses a use-after-free vulnerability in GPGME bindings during container image pulls.

How do I fix RHSA-2020:0863?

To fix RHSA-2020:0863, update your Red Hat OpenShift Container Platform to the latest patched version.

Which versions are affected by RHSA-2020:0863?

RHSA-2020:0863 affects specific versions of Red Hat OpenShift Container Platform, but exact versions can be found in the advisory.

Is there a workaround for RHSA-2020:0863?

Currently, there are no documented workarounds for the vulnerability addressed by RHSA-2020:0863.