RHSA-2020:5118: Moderate: OpenShift Container Platform 4.5.20 bug fix and golang security update

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): golang: Data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586) golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (CVE-2020-16845) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.This advisory contains the container images for Red Hat OpenShift ContainerPlatform 4.5.20. See the following advisory for the RPM packages for thisrelease:https://access.redhat.com/errata/RHSA-2020:5119 Space precludes documenting all of the container images in this advisory.See the following Release Notes documentation, which will be updatedshortly for this release, for details about these changes:https://docs.openshift.com/container-platform/4.5/releasenotes/ocp-4-5-release-notes.html This update fixes the following bug among others: Previously, the Prometheus swagger definition contained a $ref property which could not be resolved. This caused a runtime error to occur when using the Prometheus operand creation form. This was fixed by adding a definitions property to schema returned by the definitionFor helper function so that the $ref property can resolve. There are no longer runtime errors when using the Prometheus operand creation form. (BZ#1885228) You may download the oc tool and use it to inspect release image metadataas follows:(For x8664 architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.5.20-x8664The image digest is sha256:78b878986d2d0af6037d637aa63e7b6f80fc8f17d0f0d5b077ac6aca83f792a0(For s390x architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.5.20-s390xThe image digest is sha256:372d9aea634d36704d8500a2f940edb3867bfde14c0e5aa19534ea5ac90083d4(For ppc64le architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.5.20-ppc64leThe image digest is sha256:030d8323cce90de6bc7ad4119ebb7f000bde06e742f6923faf76707ffe85634aAll OpenShift Container Platform 4.5 users are advised to upgrade to theseupdated packages and images when they are available in the appropriaterelease channel. To check for available updates, use the OpenShift Consoleor the CLI oc command. Instructions for upgrading a cluster are availableathttps://docs.openshift.com/container-platform/4.5/updating/updating-cluster-between-minor.html#understanding-upgrade-channelsupdating-cluster-between-minor.