RHSA-2021:3915: Moderate: OpenShift Container Platform 3.11.542 security update
Published Oct 28, 2021
·Updated
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): kubernetes: Node disk DOS by writing to container /etc/hosts (CVE-2020-8557)For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s)listed in the References section.
Affected Software
77 affected componentsFixes available
redhat/atomic-enterprise-service-catalog<3.11.542-1.git.2e6be86.el7
3.11.542-1.git.2e6be86.el7
redhat/atomic-openshift<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-cluster-autoscaler<3.11.542-1.git.99b2acf.el7
3.11.542-1.git.99b2acf.el7
redhat/atomic-openshift-descheduler<3.11.542-1.git.d435537.el7
3.11.542-1.git.d435537.el7
redhat/atomic-openshift-dockerregistry<3.11.542-1.git.3571208.el7
3.11.542-1.git.3571208.el7
redhat/atomic-openshift-metrics-server<3.11.542-1.git.f8bf728.el7
3.11.542-1.git.f8bf728.el7
redhat/atomic-openshift-node-problem-detector<3.11.542-1.git.c8f26da.el7
3.11.542-1.git.c8f26da.el7
redhat/atomic-openshift-service-idler<3.11.542-1.git.39cfc66.el7
3.11.542-1.git.39cfc66.el7
redhat/atomic-openshift-web-console<3.11.542-1.git.06f1612.el7
3.11.542-1.git.06f1612.el7
redhat/golang-github-openshift-oauth-proxy<3.11.542-1.git.edebe84.el7
3.11.542-1.git.edebe84.el7
redhat/golang-github-prometheus-alertmanager<3.11.542-1.git.13de638.el7
3.11.542-1.git.13de638.el7
redhat/golang-github-prometheus-prometheus<3.11.542-1.git.99aae51.el7
3.11.542-1.git.99aae51.el7
redhat/openshift-ansible<3.11.542-1.git.0.ee1d12e.el7
3.11.542-1.git.0.ee1d12e.el7
redhat/openshift-enterprise-autoheal<3.11.542-1.git.f2f435d.el7
3.11.542-1.git.f2f435d.el7
redhat/openshift-enterprise-cluster-capacity<3.11.542-1.git.22be164.el7
3.11.542-1.git.22be164.el7
redhat/openshift-kuryr<3.11.542-1.git.707a557.el7
3.11.542-1.git.707a557.el7
redhat/atomic-enterprise-service-catalog<3.11.542-1.git.2e6be86.el7
3.11.542-1.git.2e6be86.el7
redhat/atomic-enterprise-service-catalog-svcat<3.11.542-1.git.2e6be86.el7
3.11.542-1.git.2e6be86.el7
redhat/atomic-openshift<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-clients<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-clients-redistributable<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-cluster-autoscaler<3.11.542-1.git.99b2acf.el7
3.11.542-1.git.99b2acf.el7
redhat/atomic-openshift-descheduler<3.11.542-1.git.d435537.el7
3.11.542-1.git.d435537.el7
redhat/atomic-openshift-docker-excluder<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-dockerregistry<3.11.542-1.git.3571208.el7
3.11.542-1.git.3571208.el7
redhat/atomic-openshift-excluder<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-hyperkube<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-hypershift<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-master<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-metrics-server<3.11.542-1.git.f8bf728.el7
3.11.542-1.git.f8bf728.el7
redhat/atomic-openshift-node<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-node-problem-detector<3.11.542-1.git.c8f26da.el7
3.11.542-1.git.c8f26da.el7
redhat/atomic-openshift-pod<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-sdn-ovs<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-service-idler<3.11.542-1.git.39cfc66.el7
3.11.542-1.git.39cfc66.el7
redhat/atomic-openshift-template-service-broker<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-tests<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-web-console<3.11.542-1.git.06f1612.el7
3.11.542-1.git.06f1612.el7
redhat/golang-github-openshift-oauth-proxy<3.11.542-1.git.edebe84.el7
3.11.542-1.git.edebe84.el7
redhat/openshift-ansible<3.11.542-1.git.0.ee1d12e.el7
3.11.542-1.git.0.ee1d12e.el7
redhat/openshift-ansible-docs<3.11.542-1.git.0.ee1d12e.el7
3.11.542-1.git.0.ee1d12e.el7
redhat/openshift-ansible-playbooks<3.11.542-1.git.0.ee1d12e.el7
3.11.542-1.git.0.ee1d12e.el7
redhat/openshift-ansible-roles<3.11.542-1.git.0.ee1d12e.el7
3.11.542-1.git.0.ee1d12e.el7
redhat/openshift-enterprise-autoheal<3.11.542-1.git.f2f435d.el7
3.11.542-1.git.f2f435d.el7
redhat/openshift-enterprise-cluster-capacity<3.11.542-1.git.22be164.el7
3.11.542-1.git.22be164.el7
redhat/openshift-kuryr-cni<3.11.542-1.git.707a557.el7
3.11.542-1.git.707a557.el7
redhat/openshift-kuryr-common<3.11.542-1.git.707a557.el7
3.11.542-1.git.707a557.el7
redhat/openshift-kuryr-controller<3.11.542-1.git.707a557.el7
3.11.542-1.git.707a557.el7
redhat/prometheus<3.11.542-1.git.99aae51.el7
3.11.542-1.git.99aae51.el7
redhat/prometheus-alertmanager<3.11.542-1.git.13de638.el7
3.11.542-1.git.13de638.el7
redhat/prometheus-node-exporter<3.11.542-1.git.609cd20.el7
3.11.542-1.git.609cd20.el7
redhat/python2-kuryr-kubernetes<3.11.542-1.git.707a557.el7
3.11.542-1.git.707a557.el7
redhat/atomic-enterprise-service-catalog<3.11.542-1.git.2e6be86.el7
3.11.542-1.git.2e6be86.el7
redhat/atomic-enterprise-service-catalog-svcat<3.11.542-1.git.2e6be86.el7
3.11.542-1.git.2e6be86.el7
redhat/atomic-openshift<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-clients<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-cluster-autoscaler<3.11.542-1.git.99b2acf.el7
3.11.542-1.git.99b2acf.el7
redhat/atomic-openshift-descheduler<3.11.542-1.git.d435537.el7
3.11.542-1.git.d435537.el7
redhat/atomic-openshift-hyperkube<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-hypershift<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-master<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-metrics-server<3.11.542-1.git.f8bf728.el7
3.11.542-1.git.f8bf728.el7
redhat/atomic-openshift-node<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-node-problem-detector<3.11.542-1.git.c8f26da.el7
3.11.542-1.git.c8f26da.el7
redhat/atomic-openshift-pod<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-sdn-ovs<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-service-idler<3.11.542-1.git.39cfc66.el7
3.11.542-1.git.39cfc66.el7
redhat/atomic-openshift-template-service-broker<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-tests<3.11.542-1.git.0.f2fd300.el7
3.11.542-1.git.0.f2fd300.el7
redhat/atomic-openshift-web-console<3.11.542-1.git.06f1612.el7
3.11.542-1.git.06f1612.el7
redhat/golang-github-openshift-oauth-proxy<3.11.542-1.git.edebe84.el7
3.11.542-1.git.edebe84.el7
redhat/openshift-ansible-test<3.11.542-1.git.0.ee1d12e.el7
3.11.542-1.git.0.ee1d12e.el7
redhat/openshift-enterprise-autoheal<3.11.542-1.git.f2f435d.el7
3.11.542-1.git.f2f435d.el7
redhat/openshift-enterprise-cluster-capacity<3.11.542-1.git.22be164.el7
3.11.542-1.git.22be164.el7
redhat/prometheus<3.11.542-1.git.99aae51.el7
3.11.542-1.git.99aae51.el7
redhat/prometheus-alertmanager<3.11.542-1.git.13de638.el7
3.11.542-1.git.13de638.el7
redhat/prometheus-node-exporter<3.11.542-1.git.609cd20.el7
3.11.542-1.git.609cd20.el7
Remediation
Event History
Oct 28, 2021
Advisory Published
via Red Hat·12:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:3915?
RHSA-2021:3915 addresses a security issue classified with moderate severity related to a denial of service vulnerability in Kubernetes.
2
How do I fix RHSA-2021:3915?
To resolve RHSA-2021:3915, users should update their Red Hat OpenShift Container Platform to the specified remedied version or higher.
3
What is CVE-2020-8557 in the context of RHSA-2021:3915?
CVE-2020-8557 is identified as the vulnerability addressed by RHSA-2021:3915, which involves a denial of service condition triggered by writing to the container's /etc/hosts file.
4
Which packages are affected by RHSA-2021:3915?
RHSA-2021:3915 affects several packages, including atomic-openshift, atomic-enterprise-service-catalog, and atomic-openshift-metrics-server.
5
Is RHSA-2021:3915 relevant for Kubernetes users?
Yes, RHSA-2021:3915 is particularly relevant for Kubernetes users utilizing Red Hat OpenShift Container Platform due to the underlying vulnerability addressed.