RHSA-2020:2927: Moderate: OpenShift Container Platform 4.4.13 machine-config-daemon and openshift security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): kubernetes: node localhost services are reachable via martian packets (CVE-2020-8558) proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/machine-config-daemonto a version that resolves this vulnerability.Fixed in 4.4.0-202007092124.p0.git.2349.08d34d1.el8 - Upgrade
Upgrade
redhat/openshiftto a version that resolves this vulnerability.Fixed in 4.4.0-202007090832.p0.git.0.bc32fb1.el8 - Upgrade
Upgrade
redhat/openshift-hyperkubeto a version that resolves this vulnerability.Fixed in 4.4.0-202007090832.p0.git.0.bc32fb1.el8 - Upgrade
Upgrade
redhat/openshiftto a version that resolves this vulnerability.Fixed in 4.4.0-202007090832.p0.git.0.bc32fb1.el7 - Upgrade
Upgrade
redhat/openshift-hyperkubeto a version that resolves this vulnerability.Fixed in 4.4.0-202007090832.p0.git.0.bc32fb1.el7 - Upgrade
Upgrade
Red Hat OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.4.13
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2927?
The severity of RHSA-2020:2927 is classified as moderate.
How do I fix RHSA-2020:2927?
To fix RHSA-2020:2927, upgrade your Red Hat OpenShift Container Platform to the latest recommended version.
What vulnerabilities are addressed in RHSA-2020:2927?
RHSA-2020:2927 addresses a vulnerability where localhost services in Kubernetes are reachable via martian packets, tracked as CVE-2020-8558.
What software is affected by RHSA-2020:2927?
Affected software includes various packages of Red Hat OpenShift and machine-config-daemon for versions prior to 4.4.0-202007092124.p0 and 4.4.0-202007090832.p0.
Is there a specific workaround for RHSA-2020:2927?
There is no specific workaround; the recommended action is to apply the latest updates to mitigate the vulnerability.