Red Hat Security Advisory

RHSA-2021:1007

OpenShift Container Platform 4.7.5 security and bug fix update

Released 2021-04-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.7 openshift4/ose-cluster-kube-descheduler-operator, openshift4/ose-cluster-kube-descheduler-rhel8-operator, openshift4/ose-metering-ansible-operator +2

TI-2021-02215 CVE-2021-3121 · GHSA-c3h9-896r-86jm

MEDIUM 43

An issue was discovered in GoGo Protobuf before 1.3.2.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03425 Published 2021-01-11 Partial fix · 1.3.2 CWE-129

TI-2021-03503 CVE-2021-20206 · GHSA-xjqr-g762-pxwp

LOW 35

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01525 Published 2021-03-26 Partial fix · 0.8.1 CWE-20