RHSA-2020:2592: Moderate: OpenShift Container Platform 4.2.36 containernetworking-plugins security update
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): containernetworking/plugins: IPv6 router advertisements allowed for MitM attacks on IPv4 clusters (CVE-2020-10749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2592?
The severity of RHSA-2020:2592 is classified as moderate.
How do I fix RHSA-2020:2592?
To fix RHSA-2020:2592, you should update to the recommended package version 0.8.6-1.rhaos4.2.el8 or 0.8.6-1.rhaos4.2.el7.
Which software versions are affected by RHSA-2020:2592?
The affected software versions by RHSA-2020:2592 include containernetworking-plugins version up to 0.8.6-1.rhaos4.2.el8 and el7.
Is there a workaround for RHSA-2020:2592?
There is no specific workaround mentioned for RHSA-2020:2592; updating to the latest version is recommended.
When was RHSA-2020:2592 released?
RHSA-2020:2592 was released on October 28, 2020.