Red Hat Security Advisory

RHSA-2021:2555

OpenShift Container Platform 4.7.19 packages and security update

Released 2021-07-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.7 cri-o-1.20.3-6.rhaos4.7.git0d0f863.el7, cri-o-1.20.3-6.rhaos4.7.git0d0f863.el8, dhcp-12:4.3.6-41.el8_3.1 +14

Fixes 2 records

TI-2021-02511 CVE-2021-3560 · GHSA-7c49-j253-wq5r

Incorrect authorization in polkit

CRITICAL 93KEV

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.22193 Published 2022-02-16 Fixed CWE-863

TI-2021-07477 CVE-2021-25217 · GHSA-pf98-cx5w-r49r

A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

MEDIUM 41

In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer s…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.06118 Published 2021-05-26 Fixed in 4.1-ESV-R16-P1, 4.4.2-P1 CWE-119