(RHSA-2020:1936) Moderate: OpenShift Container Platform 4.4.3 haproxy security update

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

Security Fix(es):

• haproxy: malformed HTTP/2 requests could lead to out-of-bounds writes (CVE-2020-11100)

• haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated “chunked” value (CVE-2019-18277)

• haproxy: HTTP/2 implementation was vulnerable to intermediary encapsulation attacks (CVE-2019-19330)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.