RHSA-2024:0485HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.48 bug fix and security update

Published
January 31, 2024
Last Modified
May 23, 2026

🔗 CVE IDs covered (5)

CVE-2023-3978 →CVE-2023-6596 →CVE-2023-39325 →CVE-2022-32190 →CVE-2022-41723 →

📋 Description

CVE-2022-32190 — golang: net/url: JoinPath does not strip relative path components in all circumstances CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding CVE-2023-3978 — golang.org/x/net/html: Cross site scripting CVE-2023-6596 — openshift: incomplete fix for Rapid Reset (CVE-2023-44487/CVE-2023-39325) CVE-2023-39325 — golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

🔗 References (19)