RHSA-2020:5606MediumCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.6 bug fix and enhancement update

Published
December 17, 2020
Last Modified
August 15, 2026

🔗 CVE IDs covered (3)

CVE-2020-16845 →CVE-2020-14040 →CVE-2020-15586 →

📋 Description

CVE-2020-14040 — golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash CVE-2020-15586 — golang: data race in certain net/http servers including ReverseProxy can lead to DoS CVE-2020-16845 — golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

🎯 Affected products9

  • Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • mcg-0:5.6.0-39.2279a46.5.6.el8.ppc64le as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • mcg-0:5.6.0-39.2279a46.5.6.el8.s390x as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • mcg-0:5.6.0-39.2279a46.5.6.el8.src as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • mcg-0:5.6.0-39.2279a46.5.6.el8.x86_64 as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • tini-0:0.18.0-5.el8.ppc64le as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • tini-0:0.18.0-5.el8.s390x as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • tini-0:0.18.0-5.el8.src as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8
  • tini-0:0.18.0-5.el8.x86_64 as a component of Red Hat OpenShift Container Storage 4.6 on RHEL-8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (6)