Red Hat Security Advisory

RHSA-2023:7606

OpenShift Container Platform 4.13.25 packages and security update

Released 2023-12-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 haproxy-2.2.24-4.rhaos4.13.el8, haproxy22-2.2.24-4.rhaos4.13.el8

Fixes 1 record

TI-2023-21094 CVE-2023-40225 · GHSA-xgq7-jp95-v2qv

HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23…

HIGH 71

HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.02147 Published 2023-08-10 Partial fix CWE-444