RHSA-2020:2878: Low: OpenShift Container Platform 4.4.12 ose-cloud-credential-operator-container security update

Published Jul 14, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic (CVE-2020-9283)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Container Platform

Remediation

Event History

Feb 24, 2024

Advisory Published

via Red Hat·11:09 PM

Data Sourced

via Red Hat·11:09 PM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:2878?

The severity of RHSA-2020:2878 is classified as moderate.

How do I fix RHSA-2020:2878?

To fix RHSA-2020:2878, users should update the golang.org/x/crypto package to the latest version.

What vulnerability does RHSA-2020:2878 address?

RHSA-2020:2878 addresses a vulnerability in the processing of crafted ssh-ed25519 public keys that can lead to a panic.

Which platforms are affected by RHSA-2020:2878?

RHSA-2020:2878 affects the Red Hat OpenShift Container Platform.

Is there a workaround for RHSA-2020:2878?

No specific workaround is provided for RHSA-2020:2878, updating the affected package is recommended.