RHSA-2019:1245: Moderate: Red Hat Quay 3.0.2 security and bug fix update
Security Fix(es):<br><li> A flaw was found in the way the DES/3DES cipher was used as part of the</li> TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite. (CVE-2016-2183)<br>Bug Fix(es):<br><li> Running Quay in config mode now works in a disconnected option which doesn't require pulling resources from the Internet.</li> <li> Quay's security scan endpoint is now enabled at startup for viewing results of Clair container image scans.</li>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:1245?
The severity of RHSA-2019:1245 is classified as moderate.
How do I fix RHSA-2019:1245?
To fix RHSA-2019:1245, you should apply the latest updates provided by your software vendor.
What impact does RHSA-2019:1245 have on my system?
RHSA-2019:1245 can allow a man-in-the-middle attacker to recover plaintext data from TLS/SSL encrypted communications.
Which applications are affected by RHSA-2019:1245?
RHSA-2019:1245 affects applications using the DES/3DES cipher in their TLS/SSL protocols.
When was RHSA-2019:1245 released?
RHSA-2019:1245 was released in 2019.