RHSA-2020:1402: Moderate: OpenShift Container Platform 4.2.28 openshift-enterprise-builder-container security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.2.28
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:1402?
The severity of RHSA-2020:1402 is classified as moderate.
How do I fix RHSA-2020:1402?
To fix RHSA-2020:1402, you should update your Red Hat OpenShift Container Platform to the latest version that addresses the vulnerability.
What does the RHSA-2020:1402 vulnerability affect?
RHSA-2020:1402 affects the GPGME bindings during the container image pull process.
Is RHSA-2020:1402 a remote vulnerability?
Yes, RHSA-2020:1402 can potentially be exploited remotely due to its impact on container image handling.
What is the CVE associated with RHSA-2020:1402?
The CVE associated with RHSA-2020:1402 is CVE-2020-12345, highlighting a use-after-free vulnerability.