Red Hat Security AdvisoryRHSA-2020:2927
OpenShift Container Platform 4.4.13 machine-config-daemon and openshift security update
Released 2020-07-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.4 machine-config-daemon-4.4.0-202007092124.p0.git.2349.08d34d1.el8, openshift-4.4.0-202007090832.p0.git.0.bc32fb1.el7, openshift-4.4.0-202007090832.p0.git.0.bc32fb1.el8 +2
Fixes 2 records
Priority MEDIUM 44
The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 runnin…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03418 · Published 2020-07-27 · Fixed in 1.18.4, 1.17.7 +1 CWE-420
Priority MEDIUM 41
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.05071 · Published 2020-02-12 · Partial fix · 0.1.1 CWE-416
