Red Hat Security AdvisoryRHSA-2020:3809
OpenShift Container Platform 4.3.38 container image security update
Released 2020-09-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.3 openshift4/ose-hyperkube, openshift4/ose-sriov-dp-admission-controller
Fixes 2 records
Priority MEDIUM 52
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.21052 · Published 2020-02-20 · Partial fix · 0.0.0-20200220183623-bac4c82f6975 CWE-347
Priority LOW 25
The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00434 · Published 2020-07-23 · Fixed in 1.18.6, 1.17.9 +1 CWE-400
