Skip to content
OpenAdvisories
High RHBA-2020:3179 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.31 packages update

Published Sep 30, 2024 · Updated Oct 19, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-clients 0:4.3.31-202007250052.p0.git.3329.59998b9.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-clients-redistributable 0:4.3.31-202007250052.p0.git.3329.59998b9.el7
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-clients 0:4.3.31-202007250052.p0.git.3329.59998b9.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-clients-redistributable 0:4.3.31-202007250052.p0.git.3329.59998b9.el8

Vulnerabilities 1

  • High 7.5
    CVE-2020-9283 Public exploit EPSS 21%

    Improper Verification of Cryptographic Signature in golang.org/x/crypto

    golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.

    k3d k3d-proxy k3d-tools golang.org/x/crypto Debian Ubuntu Wolfi Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854927
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_3179.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-9283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1804533
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-9283
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-9283
  • article
    https://groups.google.com/forum/#!topic/golang-announce/3L45YRc91SY