RHSA-2020:3842: Moderate: OpenShift Container Platform 4.5.13 openshift-enterprise-console-container security update

Published Sep 30, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Container Platform (openshift-enterprise-console-container)=4.5.13

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenShift Container Platform to a version that resolves this vulnerability.
Fixed in 4.5.13

Event History

Sep 30, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:3842?

The severity of RHSA-2020:3842 is classified as moderate.

How do I fix RHSA-2020:3842?

To fix RHSA-2020:3842, you should update your Red Hat OpenShift Container Platform to the latest patched version.

What vulnerability does RHSA-2020:3842 address?

RHSA-2020:3842 addresses the SWEET32 vulnerability, which is a birthday attack on 64-bit block ciphers.

What software is affected by RHSA-2020:3842?

RHSA-2020:3842 affects the Red Hat OpenShift Container Platform.

Is there a workaround for RHSA-2020:3842?

There are no specific workarounds for RHSA-2020:3842; applying the security update is recommended.