Red Hat Security Advisory: OpenShift Container Platform 4.9.6 packages and security update
haproxy: does not ensure that the scheme and path portions of a URI have the expected characters haproxy: an HTTP method name may contain a space followed by the name of a protected resource haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled haproxy: request smuggling attack or response splitting via duplicate content-length header
cpe:/a:redhat:openshift:4.9::el7 cpe:/a:redhat:openshift:4.9::el8