What OpenShift Online customers should know about the recent Kubernetes bugs

4 de dezembro de 2018Dave Baker1 minutos (tempo de leitura)

On December 3rd, 2018, the Kubernetes Product Security team released information about a vulnerability in kubernetes. We've addressed this at a corporate level in these postings detailing the flaws. This issue is assigned CVE-2018-1002105 and given a security impact of Critical by Red Hat Product Security. Red Hat OpenShift is built upon kubernetes and as such these bugs were also present in Red Hat OpenShift Container Platform, Red Hat OpenShift Online and Red Hat OpenShift Dedicated.

Additional information about this can be found in the Red Hat Security Vulnerability article here: https://access.redhat.com/security/vulnerabilities/3716411

OpenShift Online

OpenShift Online (Starter, Pro and openshift.io) clusters were all upgraded prior to the security announcement, and are no longer affected by the published vulnerability.

OpenShift Dedicated

OpenShift Dedicated customers have been notified separately regarding the remediation of their clusters.

If you have any questions, please open a case through the Red Hat support portal.

Support links:

https://access.redhat.com/support

https://access.redhat.com/support/contact/technicalSupport/

-- Red Hat OpenShift SRE

Sobre o autor

Dave Baker

Principal Product Security Engineer

Dave Baker has been with Red Hat since 2017. He's currently working as a Design Architect in the Secure Engineering team within Product Security, and has spent the last years in various security related roles helping to protect Red Hat OpenShift Container Platform and many other products.

Read full bio