RHSA-2021:0172: Moderate: OpenShift Container Platform 4.6.13 packages and security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): kubernetes: Docker config secrets leaked when file is malformed and loglevel >= 4 (CVE-2020-8564) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.This advisory contains the RPM packages for Red Hat OpenShift ContainerPlatform 4.6.13. See the following advisory for the container images forthis release:https://access.redhat.com/errata/RHSA-2021:0171 All OpenShift Container Platform 4.6 users are advised to upgrade to theseupdated packages and images when they are available in the appropriaterelease channel. To check for available updates, use the OpenShift Consoleor the CLI oc command. Instructions for upgrading a cluster are availableathttps://docs.openshift.com/container-platform/4.6/updating/updating-cluster-between-minor.html#understanding-upgrade-channelsupdating-cluster-between-minor.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0172?
The vulnerability RHSA-2021:0172 is classified as critical due to the leaking of sensitive Docker config secrets when a file is malformed.
How do I fix RHSA-2021:0172?
To fix RHSA-2021:0172, you need to update your OpenShift and Kubernetes components to the specified versions in the advisory.
What products are affected by RHSA-2021:0172?
The affected products for RHSA-2021:0172 include OpenShift Container Platform, cri-o, skopeo, and other related packages.
Is there a workaround for RHSA-2021:0172?
No specific workaround for RHSA-2021:0172 is detailed; updating to the remedied versions is recommended for resolution.
Which versions address the vulnerability RHSA-2021:0172?
Versions that address the vulnerability RHSA-2021:0172 include cri-o 1.19.1-4 and openshift 4.6.0-202101160934.