Red Hat Security Advisory: OpenShift Container Platform 4.5.21 bug fix and security update
Red Hat OpenShift Container Platform release 4.5.21 is now available with updates to packages and images that fix several bugs. This release includes a security update for openshift-enterprise-hyperkube for Red Hat OpenShift Container Platform 4.5.21. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-8559US | medium6.8 | Exploit | ||
The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2020:5194self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1828858external
- 1851422external
- 1879017external
- 1880341external
- 1881542external
- 1883412external
Behebungen (46)
- Behobenopenshift4/ose-hyperkube@sha256:291438846f0b5eab2a194d94e8beddcc69920a114f284f131623772ea4211483_s390x as a component of Red Hat OpenShift Container Platform 4.5
For OpenShift Container Platform 4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.5/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5194 - Behobenopenshift4/ose-hyperkube@sha256:836532b1f1ff0a0ca82a828501b6d655d4c54e6f2dccb4f07b326d544ba0eb28_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
For OpenShift Container Platform 4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.5/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5194 - Behobenopenshift4/ose-hyperkube@sha256:ca9a115a972aef41e6c8989a3a5c5644e309826f8185e5cbfd7a2f439165cfa5_amd64 as a component of Red Hat OpenShift Container Platform 4.5
For OpenShift Container Platform 4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.5/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5194 - Workaroundopenshift4/ose-cloud-credential-operator@sha256:76e346b7e0c3c20bbc9886ed51a93c72a77e296a92d592878b856d3687eb66cb_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-cloud-credential-operator@sha256:b6a3d1e249f8cd18b72b8727cb504894f0b57c441aae649d38d08cc20ad89363_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-cloud-credential-operator@sha256:ea9f084afc1d6466621b41858223e6f45482128245744b321eff3484c00925fb_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-cluster-image-registry-operator@sha256:16be80578b581cbfefd58d24cd91760fe358bfcea06304ba435b11976b504b48_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-cluster-image-registry-operator@sha256:54f0415dfc020a541840628dd220ffff9843485fc305f25461ed9e610244f91c_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-cluster-image-registry-operator@sha256:b962fe5907f57945b0ece37575d22a299c5f1986018ef00a871d217667e3e9d3_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-console@sha256:3d07bba2336f97d5a49d4a570262e253216dad4e892900edf8523ac7d98db9b7_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-console@sha256:480b6ca21ede0c02dc70f8eaa93192d140ab5d3e4db5e63ef54854205fd75500_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-console@sha256:850ba3a1c712f7d23ce2c7a5ec5310bcd6c8f16bbaa43e09cc2cf4ca3dc77d86_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-hyperkube@sha256:291438846f0b5eab2a194d94e8beddcc69920a114f284f131623772ea4211483_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-hyperkube@sha256:836532b1f1ff0a0ca82a828501b6d655d4c54e6f2dccb4f07b326d544ba0eb28_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-hyperkube@sha256:ca9a115a972aef41e6c8989a3a5c5644e309826f8185e5cbfd7a2f439165cfa5_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-hardware-inventory-recorder-rhel8@sha256:13e5d4671e9873d1054397215d464b0e145b00f954b68e0e7a940954f7b51928_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-hardware-inventory-recorder-rhel8@sha256:5762935bb3e356ee45dd798522aea781654fb7ac6f29cdb303218c00fde8a96c_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-inspector-rhel8@sha256:6120389ccf78144af5a4136245c00a987fdae287b073082f52d6e283730968b5_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-inspector-rhel8@sha256:8db4eb61ebce33619556a172c13bd7b7d2c22ce919f08cc69bd4f345d0518bb4_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-ipa-downloader-rhel8@sha256:1de8d6831e773a4d31d532bd60112a96fb488092e9102c92f3a05a4481f5fa75_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-ipa-downloader-rhel8@sha256:6c60c8ad25d1cc5ecc4f5354dea403253c288e4d8a01fd007aec9f50a76f46b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-machine-os-downloader-rhel8@sha256:0e75b1a16efa98f59006fbc6731d6b22f8eebf5b72560b2fbbe127cad51ae97c_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-machine-os-downloader-rhel8@sha256:fdfaae82f53724c08da1387e6c17d588931d74e7db288863e569912dfd15becf_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-rhel8@sha256:8397ba8c706438b413a23b3856b09ebb9b576d93035de6399e82d9497088ce3f_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-rhel8@sha256:b4359f006502b5618bdfe1640e0dea7f535d7f55e5fc8c2ff95eac857e94c767_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-static-ip-manager-rhel8@sha256:0345f1c4653153fa89f7223493ecf3c14e311772ca355636eb771674b77ff661_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-ironic-static-ip-manager-rhel8@sha256:afdeb914d795145d080a2f81f39f1b50548542fcb24a5828dcbdda31dd776a61_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-k8s-prometheus-adapter@sha256:869edcbbf0bd468c0ea95e738226b42ffa6bdf86dc37834bbbd9fccff526ce4b_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-k8s-prometheus-adapter@sha256:93f1490e7ad6cf37a7393cf516b241bd6af814ae9cfe949400d20dc409f733b4_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-k8s-prometheus-adapter@sha256:c97a2951f466e5ef88ee09a9be7b07bdc6111c14f6a85d354dcd1c152014eb8a_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-kube-proxy@sha256:4292d25d8f99dc27a6a055d4acbd504143ea895e1de5da695d2ca9ae864b0272_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-kube-proxy@sha256:57b2cd28a802af2299b0e4040c6448014cb991ac5c58e25a8bbcdbe378ec2197_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-kube-proxy@sha256:c12a43978a3536577a0d0810e8623ce699fe740394fda2f6bc5eb5a999c13bd7_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-kuryr-cni-rhel8@sha256:38407c34dfd83670d9f8409fbe0fd83fa0ec67932e2110a7f8fb088ade1a6053_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-kuryr-cni-rhel8@sha256:654b1ec6bb94b9f7fa56d941adf90feafc57a93cef7e5fa73906cee9d626caae_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-kuryr-controller-rhel8@sha256:4425a5179d53c1a06d79dbc6d660caabcf449e7cd1d50086c2e618bafac5d067_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-kuryr-controller-rhel8@sha256:ca11be9af7aa1c92ca3fd69f169ec3b74d914c0c461547ff1caacc8fd8a2e1c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-operator-lifecycle-manager@sha256:48790ca6f8eadbf4518d98476a49c3a44d38c95386377063a621b698a31ebf6d_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-operator-lifecycle-manager@sha256:bb18c8b4151dbe71e1d5f5c9979d8293b7b285faa4663608c3d338b09436d588_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-operator-lifecycle-manager@sha256:eb4aebc4a7ab91bcf80d428fb54072cd10f45f8be0d2e462615d23c0d937bc58_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-operator-marketplace@sha256:23a1f9bc432b99bc39a4a0cea91c1f7bb7d25debb6aea93f8f0ddc036ef682f5_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-operator-marketplace@sha256:aed628a3b561adc97549fb228a5632696ec664e9b5be64f28be265958ebe4017_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-operator-marketplace@sha256:b25be76593e8573103e349c2d75bf904d476190f7cdeed8810455ec4bd2715db_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-tests@sha256:1e7ef222423fab40af421655397abfffffcc335de41cee1175b41ae87e2f041a_amd64 as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-tests@sha256:a7eab5a6b3594304d15fdaeac1ce5b39cf70629fe15de1028d96e3993af0107e_s390x as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
- Workaroundopenshift4/ose-tests@sha256:eb418a4ad09758a6b7d4a381f896e9398a0209fc5d7bc7ff48fa2b1e9f755031_ppc64le as a component of Red Hat OpenShift Container Platform 4.5
No mitigation is known.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan