Bug 1528370 - Need SWEET32 fix backported to 3.6
Summary: Need SWEET32 fix backported to 3.6
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: apiserver-auth
Version: 3.6.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 3.6.z
Assignee: Matt Rogers
QA Contact: Chuan Yu
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-12-21 16:13 UTC by Chad Scribner
Modified: 2021-08-30 13:09 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-04-12 05:59:59 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 3374601 0 None None None 2018-03-16 18:45:06 UTC
Red Hat Product Errata RHBA-2018:1106 0 None None None 2018-04-12 06:00:45 UTC

Description Chad Scribner 2017-12-21 16:13:51 UTC 
Description of problem: OCP 3.6 is vulnerable to the SWEET32 attack.  It appears to be fixed in 3.7 so a backport is needed for OCP 3.6 as soon as possible.

SWEET32: https://www.openssl.org/blog/blog/2016/08/24/sweet32/

3.7: https://github.com/openshift/origin/blob/release-3.7/pkg/cmd/server/crypto/crypto.go#L151
3.6 https://github.com/openshift/origin/blob/release-3.6/pkg/cmd/server/crypto/crypto.go#L159
Comment 14 errata-xmlrpc 2018-04-12 05:59:59 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:1106
Note You need to log in before you can comment on or make changes to this bug.