Red Hat Security Advisory: OpenShift Container Platform 4.12.0 bug fix and security update
golang: out-of-bounds read in golang.org/x/text/language leads to DoS golang: net/http: improper sanitization of Transfer-Encoding header golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters prometheus/client_golang: Denial of service using InstrumentHandlerCounter golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working golang: net/url: JoinPath does not strip relative path components in all circumstances vault: insufficient certificate revocation list checking golang: regexp/syntax: limit memory used by parsing regexps openshift: etcd grpc-proxy vulnerable to The Birthday attack against 64-bit block cipher
cpe:/a:redhat:openshift:4.12::el8 cpe:/a:redhat:openshift:4.12::el9