RHSA-2020:3808: Important: OpenShift Container Platform 4.3.38 jenkins and openshift security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron.Security Fix(es): jenkins: Stored XSS vulnerability in job build time trend (CVE-2020-2220) jenkins: Stored XSS vulnerability in upstream cause (CVE-2020-2221) jenkins: Stored XSS vulnerability in 'keep forever' badge icons (CVE-2020-2222) jenkins: Stored XSS vulnerability in console links (CVE-2020-2223) kubernetes: Node disk DOS by writing to container /etc/hosts (CVE-2020-8557) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:3808?
The severity of RHSA-2020:3808 is classified as moderate.
How do I fix RHSA-2020:3808?
To fix RHSA-2020:3808, upgrade to the specified remedied package versions: openshift 4.3.37-202009120213.p0.git.0.dffefe4.el8 or jenkins 2.235.5.1600415514-1.el7.
Which software is affected by RHSA-2020:3808?
RHSA-2020:3808 affects Red Hat OpenShift Container Platform and Jenkins versions prior to their respective remedied releases.
Is RHSA-2020:3808 related to any specific Red Hat products?
Yes, RHSA-2020:3808 specifically pertains to Red Hat's OpenShift Container Platform and Jenkins products.
What are the fixed versions for RHSA-2020:3808?
The fixed versions for RHSA-2020:3808 are Openshift 4.3.37-202009120213.p0.git.0.dffefe4.el8 and Jenkins 2.235.5.1600415514-1.el7.