Red Hat Security Advisory

RHSA-2020:5260

OpenShift Container Platform 4.6.8 security and packages update

Released 2020-12-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.6 openshift-4.6.0-202012051246.p0.git.94231.efc9027.el7, openshift-4.6.0-202012051246.p0.git.94231.efc9027.el8, openshift-hyperkube-4.6.0-202012051246.p0.git.94231.efc9027.el7 +1

Fixes 1 record

TI-2020-06861 CVE-2020-8563 · GHSA-5xfg-wv98-264m

Secret leaks in logs for vSphere Provider kube-controller-manager

LOW 26

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00539 Published 2020-12-07 Fixed in 1.19.3 CWE-532