RHSA-2025:3685 - Security Advisory

Topic

Red Hat Edge Manager Version 0.5.1 Technology Preview RPMs and security fixes.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE links in the References section.

Description

Red Hat Edge Manager provides streamlined management of edge devices and
applications through a declarative approach. By defining the required state of
your edge devices, which includes your operating system versions, host
configurations, and application deployments, Red Hat Edge Manager automatically implements and maintains these configurations across your entire device fleet.

You can use Red Hat Edge Manager with Red Hat Advanced Cluster Management to
manage non-Kubernetes workloads and your operating system configuration on a Red Hat Enterprise Linux machine consistently with how you manage it on Red Hat OpenShift Container Platform.

This advisory contains the RPMs for the Technology Preview version 0.5.1 of Red Hat Edge Manager. See the following Release Notes documentation, which will be available shortly for this release, for additional details about this release:

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/release_notes/index

Security fix(es):

golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of
golang.org/x/crypto/ssh (CVE-2025-22869)

Solution

See the following documentation for details on how to enable Red Hat Edge
Manager and more:

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html-single/edge_manager/index#edge-mgr-intro

Affected Products

• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 x86_64
• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 s390x
• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 ppc64le
• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 aarch64
• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 8 x86_64
• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 8 s390x
• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 8 ppc64le
• Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 8 aarch64
• Red Hat Advanced Cluster Management for Kubernetes 2 for RHEL 9 x86_64

Fixes

• BZ - 2348367 - CVE-2025-22869 golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh

CVEs

• CVE-2025-22869

References

• https://access.redhat.com/security/updates/classification/#important
• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/release_notes/index