First published: Tue Jul 21 2020(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> kubernetes: node localhost services are reachable via martian packets (CVE-2020-8558)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat OpenShift Container Platform for IBM LinuxONE |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RHSA-2020:2926 has a moderate severity level.
To fix RHSA-2020:2926, upgrade the affected packages in your Red Hat OpenShift Container Platform environment.
RHSA-2020:2926 addresses a vulnerability that allows node localhost services to be reachable via martian packets, identified by CVE-2020-8558.
RHSA-2020:2926 affects specific versions of Red Hat OpenShift Container Platform; consult your version documentation for details.
While upgrading is the recommended solution for RHSA-2020:2926, temporary workarounds might involve adjusting network rules to restrict access to localhost services.