Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update

Fixed packages 40

Vulnerabilities 1

• Medium 5.3
  CVE-2020-8552

  Kubernetes API server denial of service

  The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

  Kubernetes Kubernetes kubernetes k8s.io/apiserver Debian Go
  Mar 27, 2020

References

• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633506
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1691678
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1745898
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1772594
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774184
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1803090
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1803616
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1808068
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1814722
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1814804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1824056
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1827744
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1829492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830158
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1832379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1838001
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_2215.json
• report
  https://access.redhat.com/security/cve/CVE-2020-8552
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1797909
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8552
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8552
• article
  https://github.com/kubernetes/kubernetes/issues/89378
• article
  https://groups.google.com/forum/#!topic/kubernetes-security-announce/2UOlsba2g0s