Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.72 bug fix and security update

🗓️ 06 Feb 2025 00:45:40Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 54 Views

Red Hat OpenShift Container Platform 4.12.72 includes critical bug fixes and security updates.

Reporter	Title	Published	Views	Family All 6013
vulnersOsv	com.atlan:package-toolkit-testing (>=5.3.1 <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0 <=2.8.0) +705 more potentially affected by CVE-2023-44487 via org.eclipse.jetty.http2:jetty-http2-server (>=12.0.0 <=12.0.19)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.lum:odinson-rest-api_2.12 (>=0.2.0 <=0.5.0) +1253 more potentially affected by CVE-2023-44487 via com.typesafe.akka:akka-http-core_2.12 (>=10.0.0-RC2 <=10.5.2)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	com.atlan:package-toolkit-testing (>=5.3.1 <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0 <=2.8.0) +827 more potentially affected by CVE-2023-44487 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0 <=12.0.19)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	com.ericsson.research.trap.transports:wshttp-server-netty (=1.4.2), com.github.kristofa:brave-grpc (>=3.6.0 <=3.7.0) +95 more potentially affected by CVE-2023-44487 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.0.Final)	10 Oct 202322:22	–	vulnersosv
vulnersOsv	ai.mantik:bridge-protocol_2.13 (>=0.4.0 <=0.4.0-rc1), ai.mantik:componently_2.13 (>=0.4.0 <=0.4.0-rc1) +858 more potentially affected by CVE-2023-44487 via com.typesafe.akka:akka-http-core_2.13 (>=10.1.8 <=10.5.2)	10 Oct 202321:28	–	vulnersosv
Vulnrichment	CVE-2023-44487	10 Oct 202300:00	–	vulnrichment
Vulnrichment	CVE-2023-45288 HTTP/2 CONTINUATION flood in net/http	4 Apr 202420:37	–	vulnrichment
Vulnrichment	CVE-2023-6597	19 Mar 202415:44	–	vulnrichment
Vulnrichment	CVE-2024-12698 Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)	18 Dec 202405:07	–	vulnrichment
Vulnrichment	CVE-2024-45338 Non-linear parsing of case-insensitive content in golang.org/x/net/html	18 Dec 202420:38	–	vulnrichment

Source	Link
access	www.access.redhat.com/security/updates/classification/
access	www.access.redhat.com/security/vulnerabilities/RHSB-2023-003
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
issues	www.issues.redhat.com/browse/OCPBUGS-45333
issues	www.issues.redhat.com/browse/OCPBUGS-47544
issues	www.issues.redhat.com/browse/OCPBUGS-47644
issues	www.issues.redhat.com/browse/OCPBUGS-48325

01 Aug 2026 02:43Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5 - 7.8

EPSS0.99999

SSVC

openshift container platform bug fix security update cve-2023-6597 cve-2023-44487 cve-2023-39325 cve-2023-45288 cve-2024-45338 upgrade instructions.