{"schemaVersion":3,"id":"RHSA-2021:0079","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: OpenShift Container Platform 3.11.374 bug fix and security update","dates":{"published":"2024-09-18T04:29:41.000Z","modified":"2026-06-29T10:33:37.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":10,"impact":4.2,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"atomic-enterprise-service-catalog","name":"atomic-enterprise-service-catalog","label":"atomic-enterprise-service-catalog","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-enterprise-service-catalog","purlType":"rpm","versions":[{"text":"< 1:3.11.374-1.git.1675.738abcc.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.11.374-1.git.1675.738abcc.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-enterprise-service-catalog-svcat","name":"atomic-enterprise-service-catalog-svcat","label":"atomic-enterprise-service-catalog-svcat","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-enterprise-service-catalog-svcat","purlType":"rpm","versions":[{"text":"< 1:3.11.374-1.git.1675.738abcc.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.11.374-1.git.1675.738abcc.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift","name":"atomic-openshift","label":"atomic-openshift","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-clients","name":"atomic-openshift-clients","label":"atomic-openshift-clients","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-clients","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-clients-redistributable","name":"atomic-openshift-clients-redistributable","label":"atomic-openshift-clients-redistributable","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-clients-redistributable","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-cluster-autoscaler","name":"atomic-openshift-cluster-autoscaler","label":"atomic-openshift-cluster-autoscaler","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-cluster-autoscaler","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.2996f62.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.2996f62.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-descheduler","name":"atomic-openshift-descheduler","label":"atomic-openshift-descheduler","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-descheduler","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.299.f128e96.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.299.f128e96.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-docker-excluder","name":"atomic-openshift-docker-excluder","label":"atomic-openshift-docker-excluder","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-docker-excluder","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-dockerregistry","name":"atomic-openshift-dockerregistry","label":"atomic-openshift-dockerregistry","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-dockerregistry","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.481.e6a880c.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.481.e6a880c.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-excluder","name":"atomic-openshift-excluder","label":"atomic-openshift-excluder","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-excluder","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-hyperkube","name":"atomic-openshift-hyperkube","label":"atomic-openshift-hyperkube","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-hyperkube","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-hypershift","name":"atomic-openshift-hypershift","label":"atomic-openshift-hypershift","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-hypershift","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-master","name":"atomic-openshift-master","label":"atomic-openshift-master","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-master","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-metrics-server","name":"atomic-openshift-metrics-server","label":"atomic-openshift-metrics-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-metrics-server","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.53.9df25a9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.53.9df25a9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-node","name":"atomic-openshift-node","label":"atomic-openshift-node","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-node","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-node-problem-detector","name":"atomic-openshift-node-problem-detector","label":"atomic-openshift-node-problem-detector","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-node-problem-detector","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.263.28335fb.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.263.28335fb.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-pod","name":"atomic-openshift-pod","label":"atomic-openshift-pod","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-pod","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-sdn-ovs","name":"atomic-openshift-sdn-ovs","label":"atomic-openshift-sdn-ovs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-sdn-ovs","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-service-idler","name":"atomic-openshift-service-idler","label":"atomic-openshift-service-idler","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-service-idler","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.15.523a1f7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.15.523a1f7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-template-service-broker","name":"atomic-openshift-template-service-broker","label":"atomic-openshift-template-service-broker","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-template-service-broker","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-tests","name":"atomic-openshift-tests","label":"atomic-openshift-tests","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-tests","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.ebd3ee9.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.ebd3ee9.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"atomic-openshift-web-console","name":"atomic-openshift-web-console","label":"atomic-openshift-web-console","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/atomic-openshift-web-console","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.647.9e78d83.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.647.9e78d83.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"golang-github-openshift-oauth-proxy","name":"golang-github-openshift-oauth-proxy","label":"golang-github-openshift-oauth-proxy","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/golang-github-openshift-oauth-proxy","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.439.966c536.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.439.966c536.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"golang-github-prometheus-alertmanager","name":"golang-github-prometheus-alertmanager","label":"golang-github-prometheus-alertmanager","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/golang-github-prometheus-alertmanager","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.3abd2a5.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.3abd2a5.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"golang-github-prometheus-node_exporter","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/golang-github-prometheus-node_exporter","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.1062.490d6d5.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.1062.490d6d5.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"golang-github-prometheus-prometheus","name":"golang-github-prometheus-prometheus","label":"golang-github-prometheus-prometheus","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/golang-github-prometheus-prometheus","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.5026.29379c4.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.5026.29379c4.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"openshift-enterprise-autoheal","name":"openshift-enterprise-autoheal","label":"openshift-enterprise-autoheal","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/openshift-enterprise-autoheal","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.218.9cf7939.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.218.9cf7939.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"openshift-enterprise-cluster-capacity","name":"openshift-enterprise-cluster-capacity","label":"openshift-enterprise-cluster-capacity","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/openshift-enterprise-cluster-capacity","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.379.80bd08f.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.379.80bd08f.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"prometheus","name":"prometheus","label":"prometheus","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/prometheus","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.5026.29379c4.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.5026.29379c4.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"prometheus-alertmanager","name":"prometheus-alertmanager","label":"prometheus-alertmanager","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/prometheus-alertmanager","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.0.3abd2a5.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.0.3abd2a5.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"prometheus-node-exporter","name":"prometheus-node-exporter","label":"prometheus-node-exporter","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/prometheus-node-exporter","purlType":"rpm","versions":[{"text":"< 0:3.11.374-1.git.1062.490d6d5.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.11.374-1.git.1062.490d6d5.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-urllib3","name":"python-urllib3","label":"python-urllib3","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-urllib3","purlType":"rpm","versions":[{"text":"< 0:1.26.2-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.26.2-1.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"python2-urllib3","name":"python2-urllib3","label":"python2-urllib3","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python2-urllib3","purlType":"rpm","versions":[{"text":"< 0:1.26.2-1.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.26.2-1.el7","eol":null,"hubHref":null}],"affectedCount":33,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:0079","label":"access.redhat.com/errata/RHSA-2021:0079","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691529","label":"bugzilla.redhat.com/show_bug.cgi?id=1691529","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866789","label":"bugzilla.redhat.com/show_bug.cgi?id=1866789","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1870050","label":"bugzilla.redhat.com/show_bug.cgi?id=1870050","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881319","label":"bugzilla.redhat.com/show_bug.cgi?id=1881319","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883632","label":"bugzilla.redhat.com/show_bug.cgi?id=1883632","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891051","label":"bugzilla.redhat.com/show_bug.cgi?id=1891051","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0079.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0079.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11840","label":"access.redhat.com/security/cve/CVE-2019-11840","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11840","label":"www.cve.org/CVERecord?id=CVE-2019-11840","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11840","label":"nvd.nist.gov/vuln/detail/CVE-2019-11840","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://groups.google.com/forum/#!msg/golang-announce/tjyNcJxb2vQ/n0NRBziSCAAJ","label":"groups.google.com/forum/","hostname":"groups.google.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8554","label":"access.redhat.com/security/cve/CVE-2020-8554","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8554","label":"www.cve.org/CVERecord?id=CVE-2020-8554","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8554","label":"nvd.nist.gov/vuln/detail/CVE-2020-8554","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://blog.champtar.fr/K8S_MITM_LoadBalancer_ExternalIPs/","label":"blog.champtar.fr/K8S_MITM_LoadBalancer_ExternalIPs/","hostname":"blog.champtar.fr","tags":["ARTICLE"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/iZWsF9nbKE8","label":"groups.google.com/g/kubernetes-security-announce/c/iZWsF9nbKE8","hostname":"groups.google.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26137","label":"access.redhat.com/security/cve/CVE-2020-26137","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26137","label":"www.cve.org/CVERecord?id=CVE-2020-26137","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26137","label":"nvd.nist.gov/vuln/detail/CVE-2020-26137","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2019-11840","CVE-2020-26137","CVE-2020-8554"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-18T04:29:41.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T10:33:37.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T16:11:32.572Z","stale":false,"partial":false}}