Skip to content
OpenAdvisories
Medium RHSA-2021:0030 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.4.32 packages and security update

Published Sep 29, 2024 · Updated Feb 24, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.4::el7 openshift 0:4.4.0-202012052258.p0.git.0.0fd57a4.el7
Red Hat · OpenShift 4 openshift:4.4::el7 openshift-hyperkube 0:4.4.0-202012052258.p0.git.0.0fd57a4.el7
Red Hat · OpenShift 4 openshift:4.4::el8 openshift 0:4.4.0-202012052258.p0.git.0.0fd57a4.el8
Red Hat · OpenShift 4 openshift:4.4::el8 openshift-hyperkube 0:4.4.0-202012052258.p0.git.0.0fd57a4.el8

Vulnerabilities 1

  • Medium 6.4
    CVE-2020-8559 Public exploit

    Privilege escalation from compromised node to cluster

    The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a ful…

    Kubernetes Kubernetes zot kots Debian Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1851422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1913234
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0030.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8559
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8559
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8559
  • article
    https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs