title: Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security and extras update
description: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON cloudevents/sdk-go: usage of WithRoundTripper to create a Client leaks credentials
cpes: cpe:/a:redhat:openshift:4.16::el8 cpe:/a:redhat:openshift:4.16::el9