Red Hat Security Advisory

RHSA-2021:3642

OpenShift Container Platform 4.6.46 security update

Released 2021-09-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.6 openshift-4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el7, openshift-4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el8, openshift-hyperkube-4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el7 +1

Fixes 1 record

TI-2021-07832 CVE-2021-25741 · GHSA-f5f7-6478-qm6p

Symlink Exchange Can Allow Host Filesystem Access

MEDIUM 51

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07964 Published 2021-09-20 Partial fix · 1.19.15, 1.20.11 +2 CWE-20