RHSA-2020:3780: Moderate: OpenShift Container Platform 4.5.11 ose-cluster-svcat-apiserver-operator-container security update

Published Sep 21, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Openshift Container Platform

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenShift Container Platform to a version that resolves this vulnerability.
Fixed in 4.5.11

Event History

Sep 21, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:3780?

The severity of RHSA-2020:3780 is categorized as critical due to potential remote code execution risks.

How do I fix RHSA-2020:3780?

To fix RHSA-2020:3780, update your OpenShift Container Platform to the latest version as recommended in the security advisory.

What are the risks associated with RHSA-2020:3780?

The risks associated with RHSA-2020:3780 include the possibility of an attacker triggering an infinite loop in encoding/unicode leading to denial of service.

Which versions of OpenShift Container Platform are affected by RHSA-2020:3780?

RHSA-2020:3780 affects multiple versions of OpenShift Container Platform prior to the fix provided in the advisory.

Is there a workaround for RHSA-2020:3780?

There are no recommended workarounds for RHSA-2020:3780; patching the system is the primary mitigation strategy.