Skip to content
OpenAdvisories
Medium RHSA-2021:3915 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 3.11.542 security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-clients-redistributable 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-docker-excluder 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-excluder 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hyperkube 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-hypershift 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-master 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-node 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-pod 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-sdn-ovs 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-template-service-broker 0:3.11.542-1.git.0.f2fd300.el7
Red Hat · OpenShift 3 openshift:3.11::el7 atomic-openshift-tests 0:3.11.542-1.git.0.f2fd300.el7

Vulnerabilities 1

  • Medium 5.5

    Kubernetes node disk Denial of Service by writing to container /etc/hosts

    The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction m…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1835977
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1991537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1995433
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2002171
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2002548
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2012587
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3915.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8557
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8557
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8557
  • article
    https://groups.google.com/g/kubernetes-security-announce/c/cB_JUsYEKyY