First published: Tue Mar 24 2020(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/openshift-clients | <4.3.7-202003130552.git.0.6027a27.el8 | 4.3.7-202003130552.git.0.6027a27.el8 |
redhat/openshift-clients | <4.3.7-202003130552.git.0.6027a27.el8 | 4.3.7-202003130552.git.0.6027a27.el8 |
redhat/openshift-clients-redistributable | <4.3.7-202003130552.git.0.6027a27.el8 | 4.3.7-202003130552.git.0.6027a27.el8 |
redhat/openshift-clients | <4.3.7-202003130552.git.0.6027a27.el7 | 4.3.7-202003130552.git.0.6027a27.el7 |
redhat/openshift-clients | <4.3.7-202003130552.git.0.6027a27.el7 | 4.3.7-202003130552.git.0.6027a27.el7 |
redhat/openshift-clients-redistributable | <4.3.7-202003130552.git.0.6027a27.el7 | 4.3.7-202003130552.git.0.6027a27.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:0928 is classified as moderate.
To fix RHSA-2020:0928, update to the fixed version 4.3.7-202003130552.git.0.6027a27.el8 or 4.3.7-202003130552.git.0.6027a27.el7 depending on your system.
Products affected by RHSA-2020:0928 include Red Hat OpenShift Container Platform versions prior to 4.3.7.
RHSA-2020:0928 addresses a use-after-free vulnerability in GPGME bindings during container image pull.
There is no known workaround for RHSA-2020:0928; applying the update is the recommended solution.