RHSA-2020:2926: Moderate: OpenShift Container Platform 4.4.13 openshift-enterprise-hyperkube-container security update

Published Jul 21, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): kubernetes: node localhost services are reachable via martian packets (CVE-2020-8558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Container Platform=4.4.13

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenShift Container Platform to a version that resolves this vulnerability.
Fixed in 4.4.13

Event History

Jul 21, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:2926?

RHSA-2020:2926 has a moderate severity level.

How do I fix RHSA-2020:2926?

To fix RHSA-2020:2926, upgrade the affected packages in your Red Hat OpenShift Container Platform environment.

What vulnerability does RHSA-2020:2926 address?

RHSA-2020:2926 addresses a vulnerability that allows node localhost services to be reachable via martian packets, identified by CVE-2020-8558.

Which versions are affected by RHSA-2020:2926?

RHSA-2020:2926 affects specific versions of Red Hat OpenShift Container Platform; consult your version documentation for details.

Is there a workaround for RHSA-2020:2926?

While upgrading is the recommended solution for RHSA-2020:2926, temporary workarounds might involve adjusting network rules to restrict access to localhost services.