Red Hat Security Advisory

RHSA-2024:0200

OpenShift Container Platform 4.12.47 security update

Released 2024-01-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 haproxy-2.2.24-4.rhaos4.12.el8, haproxy22-2.2.24-4.rhaos4.12.el8

Fixes 1 record

TI-2023-21094 CVE-2023-40225 · GHSA-xgq7-jp95-v2qv

HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23…

HIGH 71

HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.02147 Published 2023-08-10 Partial fix CWE-444