RHSA-2020:3167: Moderate: OpenShift Container Platform 4.2.z ose-openshift-controller-manager-container security update

Published Jul 28, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Container Platform>=4.2.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenShift Container Platform 4.2 to a version that resolves this vulnerability.
Fixed in 4.2.z

Event History

Jul 28, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:3167?

The severity of RHSA-2020:3167 is classified as moderate.

How do I fix RHSA-2020:3167?

To fix RHSA-2020:3167, you should update to the latest version of Red Hat OpenShift Container Platform as provided in the advisory.

What vulnerability does RHSA-2020:3167 address?

RHSA-2020:3167 addresses a use-after-free vulnerability in GPGME bindings during container image pulls.

Is my system affected by RHSA-2020:3167?

If you are using Red Hat OpenShift Container Platform, your system may be affected by RHSA-2020:3167.

When was RHSA-2020:3167 released?

RHSA-2020:3167 was released to address security vulnerabilities discovered in Red Hat OpenShift Container Platform.