Vulnerability Database
Blog
FAQ
Docs
RHSA-2021:0079
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2021:0079
Import Source
https://security.access.redhat.com/data/osv/RHSA-2021:0079.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2021:0079
Related
CVE-2019-11840
CVE-2020-26137
CVE-2020-8554
Published
2024-09-18T04:29:41Z
Modified
2024-09-18T04:29:41Z
Severity
6.5 (Medium)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS Calculator
Summary
Red Hat Security Advisory: OpenShift Container Platform 3.11.374 bug fix and security update
Details
References
https://access.redhat.com/errata/RHSA-2021:0079
https://access.redhat.com/security/updates/classification/#moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1691529
https://bugzilla.redhat.com/show_bug.cgi?id=1866789
https://bugzilla.redhat.com/show_bug.cgi?id=1870050
https://bugzilla.redhat.com/show_bug.cgi?id=1881319
https://bugzilla.redhat.com/show_bug.cgi?id=1883632
https://bugzilla.redhat.com/show_bug.cgi?id=1891051
https://access.redhat.com/security/data/csaf/v2/advisories/2021/rhsa-2021_0079.json
https://access.redhat.com/security/cve/CVE-2019-11840
https://www.cve.org/CVERecord?id=CVE-2019-11840
https://nvd.nist.gov/vuln/detail/CVE-2019-11840
https://groups.google.com/forum/#!msg/golang-announce/tjyNcJxb2vQ/n0NRBziSCAAJ
https://access.redhat.com/security/cve/CVE-2020-8554
https://www.cve.org/CVERecord?id=CVE-2020-8554
https://nvd.nist.gov/vuln/detail/CVE-2020-8554
https://blog.champtar.fr/K8S_MITM_LoadBalancer_ExternalIPs/
https://groups.google.com/g/kubernetes-security-announce/c/iZWsF9nbKE8
https://access.redhat.com/security/cve/CVE-2020-26137
https://www.cve.org/CVERecord?id=CVE-2020-26137
https://nvd.nist.gov/vuln/detail/CVE-2020-26137
Affected packages
Red Hat:openshift:3.11::el7
/
atomic-enterprise-service-catalog
Package
Name
atomic-enterprise-service-catalog
Purl
pkg:rpm/redhat/atomic-enterprise-service-catalog
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:3.11.374-1.git.1675.738abcc.el7
Red Hat:openshift:3.11::el7
/
atomic-enterprise-service-catalog-svcat
Package
Name
atomic-enterprise-service-catalog-svcat
Purl
pkg:rpm/redhat/atomic-enterprise-service-catalog-svcat
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:3.11.374-1.git.1675.738abcc.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift
Package
Name
atomic-openshift
Purl
pkg:rpm/redhat/atomic-openshift
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-clients
Package
Name
atomic-openshift-clients
Purl
pkg:rpm/redhat/atomic-openshift-clients
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-clients-redistributable
Package
Name
atomic-openshift-clients-redistributable
Purl
pkg:rpm/redhat/atomic-openshift-clients-redistributable
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-cluster-autoscaler
Package
Name
atomic-openshift-cluster-autoscaler
Purl
pkg:rpm/redhat/atomic-openshift-cluster-autoscaler
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.2996f62.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-descheduler
Package
Name
atomic-openshift-descheduler
Purl
pkg:rpm/redhat/atomic-openshift-descheduler
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.299.f128e96.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-docker-excluder
Package
Name
atomic-openshift-docker-excluder
Purl
pkg:rpm/redhat/atomic-openshift-docker-excluder
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-dockerregistry
Package
Name
atomic-openshift-dockerregistry
Purl
pkg:rpm/redhat/atomic-openshift-dockerregistry
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.481.e6a880c.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-excluder
Package
Name
atomic-openshift-excluder
Purl
pkg:rpm/redhat/atomic-openshift-excluder
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-hyperkube
Package
Name
atomic-openshift-hyperkube
Purl
pkg:rpm/redhat/atomic-openshift-hyperkube
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-hypershift
Package
Name
atomic-openshift-hypershift
Purl
pkg:rpm/redhat/atomic-openshift-hypershift
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-master
Package
Name
atomic-openshift-master
Purl
pkg:rpm/redhat/atomic-openshift-master
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-metrics-server
Package
Name
atomic-openshift-metrics-server
Purl
pkg:rpm/redhat/atomic-openshift-metrics-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.53.9df25a9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-node
Package
Name
atomic-openshift-node
Purl
pkg:rpm/redhat/atomic-openshift-node
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-node-problem-detector
Package
Name
atomic-openshift-node-problem-detector
Purl
pkg:rpm/redhat/atomic-openshift-node-problem-detector
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.263.28335fb.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-pod
Package
Name
atomic-openshift-pod
Purl
pkg:rpm/redhat/atomic-openshift-pod
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-sdn-ovs
Package
Name
atomic-openshift-sdn-ovs
Purl
pkg:rpm/redhat/atomic-openshift-sdn-ovs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-service-idler
Package
Name
atomic-openshift-service-idler
Purl
pkg:rpm/redhat/atomic-openshift-service-idler
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.15.523a1f7.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-template-service-broker
Package
Name
atomic-openshift-template-service-broker
Purl
pkg:rpm/redhat/atomic-openshift-template-service-broker
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-tests
Package
Name
atomic-openshift-tests
Purl
pkg:rpm/redhat/atomic-openshift-tests
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.ebd3ee9.el7
Red Hat:openshift:3.11::el7
/
atomic-openshift-web-console
Package
Name
atomic-openshift-web-console
Purl
pkg:rpm/redhat/atomic-openshift-web-console
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.647.9e78d83.el7
Red Hat:openshift:3.11::el7
/
golang-github-openshift-oauth-proxy
Package
Name
golang-github-openshift-oauth-proxy
Purl
pkg:rpm/redhat/golang-github-openshift-oauth-proxy
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.439.966c536.el7
Red Hat:openshift:3.11::el7
/
golang-github-prometheus-alertmanager
Package
Name
golang-github-prometheus-alertmanager
Purl
pkg:rpm/redhat/golang-github-prometheus-alertmanager
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.3abd2a5.el7
Red Hat:openshift:3.11::el7
/
golang-github-prometheus-node_exporter
Package
Name
golang-github-prometheus-node_exporter
Purl
pkg:rpm/redhat/golang-github-prometheus-node_exporter
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.1062.490d6d5.el7
Red Hat:openshift:3.11::el7
/
golang-github-prometheus-prometheus
Package
Name
golang-github-prometheus-prometheus
Purl
pkg:rpm/redhat/golang-github-prometheus-prometheus
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.5026.29379c4.el7
Red Hat:openshift:3.11::el7
/
openshift-enterprise-autoheal
Package
Name
openshift-enterprise-autoheal
Purl
pkg:rpm/redhat/openshift-enterprise-autoheal
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.218.9cf7939.el7
Red Hat:openshift:3.11::el7
/
openshift-enterprise-cluster-capacity
Package
Name
openshift-enterprise-cluster-capacity
Purl
pkg:rpm/redhat/openshift-enterprise-cluster-capacity
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.379.80bd08f.el7
Red Hat:openshift:3.11::el7
/
prometheus
Package
Name
prometheus
Purl
pkg:rpm/redhat/prometheus
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.5026.29379c4.el7
Red Hat:openshift:3.11::el7
/
prometheus-alertmanager
Package
Name
prometheus-alertmanager
Purl
pkg:rpm/redhat/prometheus-alertmanager
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.0.3abd2a5.el7
Red Hat:openshift:3.11::el7
/
prometheus-node-exporter
Package
Name
prometheus-node-exporter
Purl
pkg:rpm/redhat/prometheus-node-exporter
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.11.374-1.git.1062.490d6d5.el7
Red Hat:openshift:3.11::el7
/
python-urllib3
Package
Name
python-urllib3
Purl
pkg:rpm/redhat/python-urllib3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.26.2-1.el7
Red Hat:openshift:3.11::el7
/
python2-urllib3
Package
Name
python2-urllib3
Purl
pkg:rpm/redhat/python2-urllib3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.26.2-1.el7
RHSA-2021:0079 - OSV