(RHSA-2021:5208) Moderate: OpenShift Container Platform 4.8.25 security update

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.8.25. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2021:5209

Security Fix(es):

• haproxy: does not ensure that the scheme and path portions of a URI have
  the expected characters (CVE-2021-39240)
• haproxy: an HTTP method name may contain a space followed by the name of
  a protected resource (CVE-2021-39241)
• haproxy: it can lead to a situation with an attacker-controlled HTTP Host
  header because a mismatch between Host and authority is mishandled
  (CVE-2021-39242)
• haproxy: request smuggling attack or response splitting via duplicate
  content-length header (CVE-2021-40346)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.