Red Hat Security Advisory

RHSA-2021:0030

OpenShift Container Platform 4.4.32 packages and security update

Released 2021-01-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.4 openshift-4.4.0-202012052258.p0.git.0.0fd57a4.el7, openshift-4.4.0-202012052258.p0.git.0.0fd57a4.el8, openshift-hyperkube-4.4.0-202012052258.p0.git.0.0fd57a4.el7 +1

Fixes 1 record

TI-2020-06858 CVE-2020-8559 · GHSA-33c5-9fx5-fvjm

Privilege escalation from compromised node to cluster

LOW 39

The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate pri…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.061 Published 2020-07-22 Fixed in 0.16.13, 0.17.9 +4 CWE-601