title: Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update
description: CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix jenkins-2-plugins/git: stored XSS vulnerability opencontainers: OCI manifest and index parsing confusion golang: archive/zip: Reader.Open panics on empty string golang: net/http: limit growth of header canonicalization cache golang: syscall: don't close fd 0 on ForkExec error cri-o: pod with access to 'hostIPC' and 'hostNetwork' kernel namespace allows sysctl from the list of safe sysctls to be applied to the host
cpes: cpe:/a:redhat:openshift:4.10::el7 cpe:/a:redhat:openshift:4.10::el8