HighFix available
Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update
Type: advisorySources: OSV
- Products
- cri-o, cri-o-debuginfo, cri-o-debugsource, jenkins-2-plugins, openshift, openshift-clients, openshift-clients-redistributable, openshift-hyperkube
- Affected versions
- Not specified
- Fixed versions
- 0:1.19.1-2.rhaos4.6.git2af9ecf.el8, 0:4.6.0-202012172338.p0.git.3800.30af700.el7, 0:4.6.0-202012172338.p0.git.3800.30af700.el8, 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7, 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8, 0:4.6.1608634578-1.el7, 0:4.6.1609853716-1.el8
- CVEs
- CVE-2020-2304, CVE-2020-2305, CVE-2020-2306, CVE-2020-2307, CVE-2020-2308, CVE-2020-2309, CVE-2020-28362
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 09:05 UTC · Revision 1
Source evidence
Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update
core-osv · Original sourcePublished 16 Sept 2024, 05:17 UTC
Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update
osv:RHSA-2021:0038
jenkins-2-plugins
Fixed versions: 0:4.6.1608634578-1.el7
jenkins-2-plugins
Fixed versions: 0:4.6.1609853716-1.el8
openshift
Fixed versions: 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7
openshift-clients
Fixed versions: 0:4.6.0-202012172338.p0.git.3800.30af700.el7
openshift-clients-redistributable
Fixed versions: 0:4.6.0-202012172338.p0.git.3800.30af700.el7
openshift-hyperkube
Fixed versions: 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7
cri-o
Fixed versions: 0:1.19.1-2.rhaos4.6.git2af9ecf.el8
cri-o-debuginfo
Fixed versions: 0:1.19.1-2.rhaos4.6.git2af9ecf.el8
cri-o-debugsource
Fixed versions: 0:1.19.1-2.rhaos4.6.git2af9ecf.el8
openshift
Fixed versions: 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8
openshift-clients
Fixed versions: 0:4.6.0-202012172338.p0.git.3800.30af700.el8
openshift-clients-redistributable
Fixed versions: 0:4.6.0-202012172338.p0.git.3800.30af700.el8
openshift-hyperkube
Fixed versions: 0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8
Complete source record
{
"id": "7e700d2f8dcb16c9e1a7405521a4658d531c27951335e7ceeff43a45bb8ce820",
"url": "https://osv.dev/vulnerability/RHSA-2021%3A0038",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update",
"summary": "Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update",
"evidence": "osv:RHSA-2021:0038",
"products": [
{
"name": {
"value": "jenkins-2-plugins",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.1608634578-1.el7",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "jenkins-2-plugins",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.1609853716-1.el8",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-clients",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012172338.p0.git.3800.30af700.el7",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-clients-redistributable",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012172338.p0.git.3800.30af700.el7",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-hyperkube",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cri-o",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.19.1-2.rhaos4.6.git2af9ecf.el8",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cri-o-debuginfo",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.19.1-2.rhaos4.6.git2af9ecf.el8",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cri-o-debugsource",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.19.1-2.rhaos4.6.git2af9ecf.el8",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-clients",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012172338.p0.git.3800.30af700.el8",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-clients-redistributable",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012172338.p0.git.3800.30af700.el8",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "openshift-hyperkube",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2021:0038",
"aliases": [
"RHSA-2021:0038"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.1608634578-1.el7"
}
]
}
],
"package": {
"name": "jenkins-2-plugins",
"purl": "pkg:rpm/redhat/jenkins-2-plugins",
"ecosystem": "Red Hat:openshift:4.6::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.1609853716-1.el8"
}
]
}
],
"package": {
"name": "jenkins-2-plugins",
"purl": "pkg:rpm/redhat/jenkins-2-plugins",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7"
}
]
}
],
"package": {
"name": "openshift",
"purl": "pkg:rpm/redhat/openshift",
"ecosystem": "Red Hat:openshift:4.6::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012172338.p0.git.3800.30af700.el7"
}
]
}
],
"package": {
"name": "openshift-clients",
"purl": "pkg:rpm/redhat/openshift-clients",
"ecosystem": "Red Hat:openshift:4.6::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012172338.p0.git.3800.30af700.el7"
}
]
}
],
"package": {
"name": "openshift-clients-redistributable",
"purl": "pkg:rpm/redhat/openshift-clients-redistributable",
"ecosystem": "Red Hat:openshift:4.6::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7"
}
]
}
],
"package": {
"name": "openshift-hyperkube",
"purl": "pkg:rpm/redhat/openshift-hyperkube",
"ecosystem": "Red Hat:openshift:4.6::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.19.1-2.rhaos4.6.git2af9ecf.el8"
}
]
}
],
"package": {
"name": "cri-o",
"purl": "pkg:rpm/redhat/cri-o",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.19.1-2.rhaos4.6.git2af9ecf.el8"
}
]
}
],
"package": {
"name": "cri-o-debuginfo",
"purl": "pkg:rpm/redhat/cri-o-debuginfo",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.19.1-2.rhaos4.6.git2af9ecf.el8"
}
]
}
],
"package": {
"name": "cri-o-debugsource",
"purl": "pkg:rpm/redhat/cri-o-debugsource",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8"
}
]
}
],
"package": {
"name": "openshift",
"purl": "pkg:rpm/redhat/openshift",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012172338.p0.git.3800.30af700.el8"
}
]
}
],
"package": {
"name": "openshift-clients",
"purl": "pkg:rpm/redhat/openshift-clients",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012172338.p0.git.3800.30af700.el8"
}
]
}
],
"package": {
"name": "openshift-clients-redistributable",
"purl": "pkg:rpm/redhat/openshift-clients-redistributable",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8"
}
]
}
],
"package": {
"name": "openshift-hyperkube",
"purl": "pkg:rpm/redhat/openshift-hyperkube",
"ecosystem": "Red Hat:openshift:4.6::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2021:0038.json"
}
}
],
"modified": "2026-10-13T10:02:03Z",
"provider": "osv",
"upstream": [
"CVE-2020-2304",
"CVE-2020-2305",
"CVE-2020-2306",
"CVE-2020-2307",
"CVE-2020-2308",
"CVE-2020-2309",
"CVE-2020-28362"
],
"references": [
"https://access.redhat.com/errata/RHSA-2021:0038",
"https://access.redhat.com/security/updates/classification/#important",
"https://bugzilla.redhat.com/show_bug.cgi?id=1895939",
"https://bugzilla.redhat.com/show_bug.cgi?id=1895940",
"https://bugzilla.redhat.com/show_bug.cgi?id=1895941",
"https://bugzilla.redhat.com/show_bug.cgi?id=1895945",
"https://bugzilla.redhat.com/show_bug.cgi?id=1895946",
"https://bugzilla.redhat.com/show_bug.cgi?id=1895947",
"https://bugzilla.redhat.com/show_bug.cgi?id=1897635",
"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0038.json",
"https://access.redhat.com/security/cve/CVE-2020-2304",
"https://www.cve.org/CVERecord?id=CVE-2020-2304",
"https://nvd.nist.gov/vuln/detail/CVE-2020-2304",
"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2145",
"https://access.redhat.com/security/cve/CVE-2020-2305",
"https://www.cve.org/CVERecord?id=CVE-2020-2305",
"https://nvd.nist.gov/vuln/detail/CVE-2020-2305",
"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2115",
"https://access.redhat.com/security/cve/CVE-2020-2306",
"https://www.cve.org/CVERecord?id=CVE-2020-2306",
"https://nvd.nist.gov/vuln/detail/CVE-2020-2306",
"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2104",
"https://access.redhat.com/security/cve/CVE-2020-2307",
"https://www.cve.org/CVERecord?id=CVE-2020-2307",
"https://nvd.nist.gov/vuln/detail/CVE-2020-2307",
"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646",
"https://access.redhat.com/security/cve/CVE-2020-2308",
"https://www.cve.org/CVERecord?id=CVE-2020-2308",
"https://nvd.nist.gov/vuln/detail/CVE-2020-2308",
"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2102",
"https://access.redhat.com/security/cve/CVE-2020-2309",
"https://www.cve.org/CVERecord?id=CVE-2020-2309",
"https://nvd.nist.gov/vuln/detail/CVE-2020-2309",
"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2103",
"https://access.redhat.com/security/cve/CVE-2020-28362",
"https://www.cve.org/CVERecord?id=CVE-2020-28362",
"https://nvd.nist.gov/vuln/detail/CVE-2020-28362"
]
},
"related_cves": [
{
"value": "CVE-2020-2304",
"evidence": "/upstream"
},
{
"value": "CVE-2020-2305",
"evidence": "/upstream"
},
{
"value": "CVE-2020-2306",
"evidence": "/upstream"
},
{
"value": "CVE-2020-2307",
"evidence": "/upstream"
},
{
"value": "CVE-2020-2308",
"evidence": "/upstream"
},
{
"value": "CVE-2020-2309",
"evidence": "/upstream"
},
{
"value": "CVE-2020-28362",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 307664,
"published_at": "2024-09-16T05:17:59+00:00"
}