Red Hat Security Advisory

RHSA-2020:0863

OpenShift Container Platform 4.3.8 proglottis/gpgme security update

Released 2020-03-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.3 openshift4/ose-cli, openshift4/ose-cli-artifacts, openshift4/ose-docker-builder

Fixes 1 record

TI-2020-07179 CVE-2020-8945 · GHSA-m6wg-2mwg-4rfq

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as…

MEDIUM 41

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.05071 Published 2020-02-12 Partial fix · 0.1.1 CWE-416