Red Hat Security Advisory

RHSA-2021:3646

OpenShift Container Platform 3.11.524 security and bug fix update

Released 2021-09-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 atomic-openshift-3.11.524-1.git.0.2dffce7.el7, atomic-openshift-clients-3.11.524-1.git.0.2dffce7.el7, atomic-openshift-clients-redistributable-3.11.524-1.git.0.2dffce7.el7 +10

Fixes 1 record

TI-2021-07832 CVE-2021-25741 · GHSA-f5f7-6478-qm6p

Symlink Exchange Can Allow Host Filesystem Access

MEDIUM 51

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07964 Published 2021-09-20 Partial fix · 1.19.15, 1.20.11 +2 CWE-20