Red Hat Security Advisory

RHSA-2021:3635

OpenShift Container Platform 4.7.32 packages and security update

Released 2021-09-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.7 openshift-4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el7, openshift-4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el8, openshift-hyperkube-4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el7 +1

Fixes 1 record

TI-2021-07832 CVE-2021-25741 · GHSA-f5f7-6478-qm6p

Symlink Exchange Can Allow Host Filesystem Access

MEDIUM 51

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07964 Published 2021-09-20 Partial fix · 1.19.15, 1.20.11 +2 CWE-20