RHSA-2021:0436: Moderate: OpenShift Container Platform 4.6 compliance-operator security and bug fix update
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.The compliance-operator image updates are now available for OpenShift Container Platform 4.6.This advisory provides the following updates among others: Enhances profile parsing time. Fixes excessive resource consumption from the Operator. Fixes default content image. Fixes outdated remediation handling. Security Fix(es): golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0436?
The severity of RHSA-2021:0436 is categorized as important.
How do I fix the vulnerabilities addressed in RHSA-2021:0436?
To fix the vulnerabilities in RHSA-2021:0436, update your Red Hat OpenShift Container Platform to the latest compliance-operator image version as recommended in the advisory.
Which versions of Red Hat OpenShift Container Platform are affected by RHSA-2021:0436?
RHSA-2021:0436 affects Red Hat OpenShift Container Platform 4.6 and earlier versions.
What specific vulnerabilities are covered by RHSA-2021:0436?
RHSA-2021:0436 addresses various vulnerabilities related to the compliance-operator image that could impact the security of the OpenShift Container Platform.
Is there a workaround for the vulnerabilities in RHSA-2021:0436?
No specific workaround is recommended for RHSA-2021:0436; updating to the patched version is advised.