Description:

Red Hat has released security updates to address vulnerabilities in the following products:

• OpenShift Container Platform 4.3.31 openshift
  • Red Hat OpenShift Container Platform 4.3 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.3 for RHEL 7 x86_64
  • Red Hat OpenShift Container Platform for Power 4.3 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.3 for RHEL 7 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.3 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.3 for RHEL 7 s390x
• OpenShift Container Platform 4.3.31 openshift-enterprise-hyperkube-container
  • Red Hat OpenShift Container Platform 4.3 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.3 for RHEL 7 x86_64
  • Red Hat OpenShift Container Platform for Power 4.3 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.3 for RHEL 7 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.3 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.3 for RHEL 7 s390x
• Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container
  • Red Hat Ansible Tower 3.7 x86_64
• Red Hat Ansible Tower 3.6.5-1 - RHEL7 Container
  • Red Hat Ansible Tower 3.6 x86_64

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Elevate privileges
• Unauthorized disclosure of information

Best practice and Recommendations:

The CERT team encourages users to review Red Hat security advisory and apply the necessary updates:

• https://access.redhat.com/errata/RHSA-2020:3183
• https://access.redhat.com/errata/RHSA-2020:3184
• https://access.redhat.com/errata/RHSA-2020:3328
• https://access.redhat.com/errata/RHSA-2020:3329