Red Hat Security Advisory

RHSA-2020:3578

OpenShift Container Platform 4.5.8 security update

Released 2020-09-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.5 openshift4/ose-cluster-network-operator, openshift4/ose-cluster-version-operator, openshift4/ose-elasticsearch-operator +1

Fixes 2 records

TI-2020-11000 CVE-2020-14040 · GHSA-5rcv-m4m3-hfh7

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could…

LOW 37

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01886 Published 2020-06-17 Partial fix · 0.3.3 CWE-835

TI-2020-05663 CVE-2020-7015 · GHSA-xcx2-2cj3-98r7

Cross-site scripting in Elastic Kibana

LOW 26

Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00779 Published 2020-06-03 Partial fix CWE-79