Red Hat Security Advisory

RHSA-2021:0037

OpenShift Container Platform 4.6.12 bug fix and security update

Released 2021-01-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.6 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8-operator, openshift4/ose-aws-machine-controllers +47

TI-2020-17201 CVE-2020-28362 · GHSA-gff4-9rfx-4pcw

LOW 39

Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03859 Published 2020-11-18 Partial fix CWE-295

TI-2020-06864 CVE-2020-8566 · GHSA-5x96-j797-5qqw

LOW 25

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00526 Published 2020-12-07 Partial fix · 1.19.3, 1.18.10 +1 CWE-532