CVE-2020-8945
Fixed in a distro release EPSS 5%
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
Products: gpgme_project gpgme, redhat openshift_container_platform, redhat openshift_container_platform_for_ibm_z, redhat openshift_container_platform_for_linuxone, fedoraproject fedora, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_power_little_endian, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/proglottis/gpgme | 0.1.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | golang-github-proglottis-gpgme | 0.1.1-1 |
| Debian 13 | golang-github-proglottis-gpgme | 0.1.1-1 |
| Debian 14 | golang-github-proglottis-gpgme | 0.1.1-1 |
| Red Hat openshift 3.11 | atomic-openshift | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-clients | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-clients-redistributable | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-docker-excluder | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-excluder | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hyperkube | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hypershift | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-master | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-node | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-pod | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-sdn-ovs | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-template-service-broker | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-tests | 0:3.11.248-1.git.0.92ee8ac.el7 |
| Red Hat openshift 3.11 | atomic-openshift-web-console | 0:3.11.248-1.git.1.cc96c2d.el7 |
| Red Hat openshift 3.11 | cri-o | 0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7 |
| Red Hat openshift 3.11 | cri-o-debuginfo | 0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7 |
| Red Hat openshift 4.1 | containers-common | 1:0.1.32-6.git1715c90.el8_0 |
| Red Hat openshift 4.1 | skopeo | 1:0.1.32-6.git1715c90.el8_0 |
| Red Hat openshift 4.1 | skopeo-debuginfo | 1:0.1.32-6.git1715c90.el8_0 |
| Red Hat openshift 4.1 | skopeo-debugsource | 1:0.1.32-6.git1715c90.el8_0 |
| Red Hat openshift 4.2 | containers-common | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
| Red Hat openshift 4.2 | openshift-clients | 0:4.2.32-202005020632.git.1.1b0fab9.el8 |
| Red Hat openshift 4.2 | openshift-clients-redistributable | 0:4.2.32-202005020632.git.1.1b0fab9.el8 |
| Red Hat openshift 4.2 | skopeo | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
| Red Hat openshift 4.2 | skopeo-debuginfo | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
| Red Hat openshift 4.2 | skopeo-debugsource | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
| Red Hat openshift 4.3 | containers-common | 1:0.1.40-4.rhaos.el8 |
| Red Hat openshift 4.3 | cri-o | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 |
| Red Hat openshift 4.3 | cri-o | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el7 |
| Red Hat openshift 4.3 | cri-o-debuginfo | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 |
| Red Hat openshift 4.3 | cri-o-debuginfo | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el7 |
| Red Hat openshift 4.3 | cri-o-debugsource | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 |
| Red Hat openshift 4.3 | openshift-clients | 0:4.3.7-202003130552.git.0.6027a27.el8 |
| Red Hat openshift 4.3 | openshift-clients | 0:4.3.7-202003130552.git.0.6027a27.el7 |
| Red Hat openshift 4.3 | openshift-clients-redistributable | 0:4.3.7-202003130552.git.0.6027a27.el8 |
| Red Hat openshift 4.3 | openshift-clients-redistributable | 0:4.3.7-202003130552.git.0.6027a27.el7 |
| Red Hat openshift 4.3 | podman | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | podman-debuginfo | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | podman-debugsource | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | podman-docker | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | podman-manpages | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | podman-remote | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | podman-remote-debuginfo | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | podman-tests | 0:1.6.4-10.rhaos4.3.el8 |
| Red Hat openshift 4.3 | skopeo | 1:0.1.40-4.rhaos.el8 |
| Red Hat openshift 4.3 | skopeo-debuginfo | 1:0.1.40-4.rhaos.el8 |
| Red Hat openshift 4.3 | skopeo-debugsource | 1:0.1.40-4.rhaos.el8 |
| Red Hat openshift 4.3 | skopeo-tests | 1:0.1.40-4.rhaos.el8 |
| Red Hat openshift 4.4 | cri-o | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7 |
| Red Hat openshift 4.4 | cri-o | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 |
| Red Hat openshift 4.4 | cri-o-debuginfo | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 |
| Red Hat openshift 4.4 | cri-o-debuginfo | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7 |
| Red Hat openshift 4.4 | cri-o-debugsource | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 |
| Red Hat openshift 4.4 | machine-config-daemon | 0:4.4.0-202007092124.p0.git.2349.08d34d1.el8 |
| Red Hat openshift 4.4 | openshift | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el7 |
| Red Hat openshift 4.4 | openshift | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el8 |
| Red Hat openshift 4.4 | openshift-hyperkube | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el7 |
| Red Hat openshift 4.4 | openshift-hyperkube | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el8 |
| Red Hat openshift 4.5 | machine-config-daemon | 0:4.5.0-202007012112.p0.git.2527.d12c3da.el8 |
| Red Hat openshift 4.5 | openshift | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
| Red Hat openshift 4.5 | openshift | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |
| Red Hat openshift 4.5 | openshift-hyperkube | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
| Red Hat openshift 4.5 | openshift-hyperkube | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |
| Red Hat rhel extras other 7 | buildah | 0:1.11.6-8.el7_8 |
| Red Hat rhel extras other 7 | buildah-debuginfo | 0:1.11.6-8.el7_8 |
| Red Hat rhel extras other 7 | containers-common | 1:0.1.40-7.el7_8 |
| Red Hat rhel extras other 7 | docker | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-client | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-common | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-debuginfo | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-logrotate | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-lvm-plugin | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-novolume-plugin | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-rhel-push-plugin | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-v1.10-migrator | 2:1.13.1-161.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | podman | 0:1.6.4-18.el7_8 |
| Red Hat rhel extras other 7 | podman-debuginfo | 0:1.6.4-18.el7_8 |
| Red Hat rhel extras other 7 | podman-docker | 0:1.6.4-18.el7_8 |
| Red Hat rhel extras other 7 | skopeo | 1:0.1.40-7.el7_8 |
| Red Hat rhel extras other 7 | skopeo-debuginfo | 1:0.1.40-7.el7_8 |
| Ubuntu 20.04 LTS | golang-github-proglottis-gpgme | no fix |
| Ubuntu 25.10 | singularity-container | no fix |
| Ubuntu 26.04 LTS | singularity-container | no fix |
| Ubuntu Pro 18.04 LTS | singularity-container | no fix |
| Ubuntu Pro 24.04 LTS | singularity-container | no fix |