Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-clients | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-clients-redistributable | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-docker-excluder | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-excluder | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-hyperkube | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-hypershift | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-master | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-node | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-pod | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-sdn-ovs | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-template-service-broker | 0:3.11.542-1.git.0.f2fd300.el7 |
| Red Hat · OpenShift 3 openshift:3.11::el7 | atomic-openshift-tests | 0:3.11.542-1.git.0.f2fd300.el7 |
Vulnerabilities 1
-
Medium 5.5
Kubernetes node disk Denial of Service by writing to container /etc/hosts
The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction m…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1835977
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1991537
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1995433
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2002171
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2002548
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2012587
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3915.json
-
report
https://access.redhat.com/security/cve/CVE-2020-8557
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-8557
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-8557
-
article
https://groups.google.com/g/kubernetes-security-announce/c/cB_JUsYEKyY