First published: Wed Aug 12 2020(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allowed for panic (CVE-2020-9283)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:3414 is classified as low.
To fix RHSA-2020:3414, update your Red Hat OpenShift Container Platform to the latest version that includes the security fix.
RHSA-2020:3414 addresses a vulnerability in processing crafted ssh-ed25519 public keys that could lead to a panic.
The affected versions of Red Hat OpenShift Container Platform are those prior to the patch released for RHSA-2020:3414.
There are no specific workarounds documented for RHSA-2020:3414; the recommended action is to apply the security update.