First published: Mon Jul 06 2020(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allowed for panic (CVE-2020-9283)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:2790 is classified as low.
RHSA-2020:2790 addresses a vulnerability in golang.org/x/crypto that allows for panic when processing crafted ssh-ed25519 public keys.
To fix RHSA-2020:2790, update the Red Hat OpenShift Container Platform to the latest version that includes the security patch.
RHSA-2020:2790 affects specific versions of the Red Hat OpenShift Container Platform that utilize the vulnerable golang.org/x/crypto library.
Yes, applying the fix for RHSA-2020:2790 is necessary to prevent potential exploitation through the outlined vulnerability.