Skip to content
OpenAdvisories
Unscored RHBA-2020:0390 3 CVEs

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.1 packages update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.3::el7 cri-o 0:1.16.2-13.dev.rhaos4.3.gita83f883.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift 0:4.3.1-202001310552.git.0.331f390.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-clients 0:4.3.1-202001310552.git.1.075d46a.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-clients-redistributable 0:4.3.1-202001310552.git.1.075d46a.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-hyperkube 0:4.3.1-202001310552.git.0.331f390.el7
Red Hat · OpenShift 4 openshift:4.3::el8 cri-o 0:1.16.2-15.dev.rhaos4.3.gita83f883.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift 0:4.3.1-202001310552.git.0.331f390.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-clients 0:4.3.1-202001310552.git.1.075d46a.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-clients-redistributable 0:4.3.1-202001310552.git.1.075d46a.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-hyperkube 0:4.3.1-202001310552.git.0.331f390.el8
Red Hat · OpenShift 4 openshift:4.3::el8 slirp4netns 0:0.4.2-3.git21fdece.el8
Red Hat · OpenShift 4 openshift:4.3::el8 slirp4netns-debuginfo 0:0.4.2-3.git21fdece.el8
Red Hat · OpenShift 4 openshift:4.3::el8 slirp4netns-debugsource 0:0.4.2-3.git21fdece.el8

Vulnerabilities 3

  • Unscored —
    CVE-2019-17596 Public exploit

    Panic on invalid DSA public keys in crypto/dsa

    Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

    golang go stdlib golang-1.8 Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2020-7039

    tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands …

    qemu qemu libslirp slirp Debian Ubuntu
  • Unscored —
    CVE-2020-7211

    tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

    libslirp Debian

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1793944
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0390.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-17596
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1763310
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-17596
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-17596
  • article
    https://groups.google.com/forum/#!msg/golang-announce/lVEm7llp0w0/VbafyRkgCgAJ
  • report
    https://access.redhat.com/security/cve/CVE-2020-7039
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1791551
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-7039
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-7039
  • report
    https://access.redhat.com/security/cve/CVE-2020-7211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1792130
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-7211
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-7211
  • article
    https://www.voidsecurity.in/2019/01/virtualbox-tftp-server-pxe-boot.html