Red Hat Security Advisory: OpenShift Container Platform 4.8.56 packages and security update

CVE-2022-2048 — http2-server: Invalid HTTP/2 requests cause DoS CVE-2022-29047 — Libraries: Untrusted users can modify some Pipeline libraries in Pipeline Shared Groovy Libraries Plugin CVE-2022-30945 — plugin: Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Pipeline: Groovy Plugin CVE-2022-30946 — plugin: CSRF vulnerability in Script Security Plugin CVE-2022-30948 — plugin: Mercurial SCM plugin can check out from the controller file system CVE-2022-30952 — plugin: User-scoped credentials exposed to other users by Pipeline SCM API for Blue Ocean Plugin CVE-2022-30953 — plugin: CSRF vulnerability in Blue Ocean Plugin CVE-2022-30954 — plugin: missing permission checks in Blue Ocean Plugin CVE-2022-34174 — jenkins: Observable timing discrepancy allows determining username validity CVE-2022-34176 — jenkins-plugin/junit: Stored XSS vulnerability in JUnit Plugin CVE-2022-34177 — jenkins-plugin: Arbitrary file write vulnerability in Pipeline Input Step Plugin CVE-2022-36881 — jenkins-plugin: Man-in-the-Middle (MitM) in org.jenkins-ci.plugins:git-client CVE-2022-36882 — jenkins-plugin: Cross-site Request Forgery (CSRF) in org.jenkins-ci.plugins:git CVE-2022-36883 — plugin: Lack of authentication mechanism in Git Plugin webhook CVE-2022-36884 — plugin: Lack of authentication mechanism in Git Plugin webhook CVE-2022-36885 — plugin: Non-constant time webhook signature comparison in GitHub Plugin