Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
OpenShift Container Storage 4.6 has a security patch
published 2 years ago
Summary
Red Hat OpenShift Container Storage 4.6 has been updated to fix some bugs and add new features. This update is important for security, but it does not affect the core functionality of the software. You should apply this update to ensure you have the latest security patches.
What to do
- Update redhat mcg to version 0:5.6.0-39.2279a46.5.6.el8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:openshift_container_storage:4.6::el8 | redhat | mcg |
< 0:5.6.0-39.2279a46.5.6.el8 Fix: upgrade to 0:5.6.0-39.2279a46.5.6.el8
|
Original advisory text
Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.6 bug fix and enhancement update
References
- https://access.redhat.com/errata/RHSA-2020:5606 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1853652 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1856953 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1867099 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5606.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2020-14040 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-14040 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-14040 Vendor Advisory
- https://github.com/golang/go/issues/39491 Third Party Advisory
- https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2020-15586 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-15586 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-15586 Vendor Advisory
- https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2020-16845 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-16845 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-16845 Vendor Advisory
- https://groups.google.com/g/golang-announce/c/NyPIaucMgXo Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Sep 2024
Updated27 Mar 2026
First seen27 Mar 2026
Sources
RHSA-2020:5606 · OSV
Track software like this
Free during beta