RHSA-2020:0451: Moderate: OpenShift Container Platform 3.11 security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s)listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 3.11.170
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0451?
The severity of RHSA-2020:0451 is considered important due to vulnerabilities associated with SSL/TLS protocols.
How do I fix RHSA-2020:0451?
To fix RHSA-2020:0451, update your Red Hat OpenShift Container Platform to the latest version where the vulnerability has been addressed.
What is the main vulnerability addressed in RHSA-2020:0451?
The main vulnerability addressed in RHSA-2020:0451 is a birthday attack against 64-bit block ciphers, known as SWEET32, identified by CVE-2016-2183.
Which versions of Red Hat OpenShift are affected by RHSA-2020:0451?
RHSA-2020:0451 affects multiple versions of Red Hat OpenShift Container Platform prior to the updates that remedy the vulnerability.
Is RHSA-2020:0451 related to other vulnerabilities?
Yes, RHSA-2020:0451 is related to cryptographic vulnerabilities in SSL/TLS that can impact secure communications.