Skip to content
OpenAdvisories
Medium RHSA-2020:5363 2 CVEs

Red Hat Security Advisory: OpenShift Container Platform 3.11.346 security and bug fix update

Published Sep 29, 2024 · Updated Feb 24, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients-redistributable 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-docker-excluder 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-excluder 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hyperkube 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hypershift 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-master 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-node 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-pod 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-sdn-ovs 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-template-service-broker 0:3.11.346-1.git.0.ea10721.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-tests 0:3.11.346-1.git.0.ea10721.el7

Vulnerabilities 2

  • Medium 6.4
    CVE-2020-8559 Public exploit

    Privilege escalation from compromised node to cluster

    The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a ful…

    Kubernetes Kubernetes zot kots Debian Alpine Wolfi Go
  • Low 2.6
    CVE-2018-1002102

    Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints

    Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect a…

    Kubernetes Kubernetes kubernetes Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1784602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1851422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1860906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1880784
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1895445
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1896696
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1898906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1899609
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1903524
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5363.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1002102
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1002102
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1002102
  • report
    https://access.redhat.com/security/cve/CVE-2020-8559
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8559
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8559
  • article
    https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs