RHSA-2020:5159: Low: OpenShift Container Platform 4.6.6 security update
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.Security Fix(es): golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (CVE-2020-16845) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/faqto a version that resolves this vulnerability.Fixed in 0.0.6-5.el8 - Upgrade
Upgrade
OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.6.6
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:5159?
The severity of RHSA-2020:5159 is classified as Critical due to potential security vulnerabilities in the affected packages.
How do I fix RHSA-2020:5159?
To fix RHSA-2020:5159, update the affected package 'faq' to version 0.0.6-5.el8 or newer.
What vulnerabilities does RHSA-2020:5159 address?
RHSA-2020:5159 addresses vulnerabilities in the golang implementation allowing for unrestricted reading from invalid inputs.
Which software is affected by RHSA-2020:5159?
RHSA-2020:5159 affects the Red Hat OpenShift Container Platform packages related to the golang library.
How can I verify if my system is affected by RHSA-2020:5159?
You can verify if your system is affected by checking the installed version of the 'faq' package against the remediation version indicated in RHSA-2020:5159.