Red Hat Security Advisory

RHSA-2024:0195

OpenShift Container Platform 4.13.29 packages and security update

Released 2024-01-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 cri-o-1.26.4-6.1.rhaos4.13.git9eb9cf3.el8, cri-o-1.26.4-6.1.rhaos4.13.git9eb9cf3.el9

Fixes 1 record

TI-2023-05936 CVE-2023-6476 · GHSA-p4rx-7wvg-fwrc

Cri-o: pods are able to break out of resource confinement on cgroupv2

LOW 34

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00859 Published 2024-01-09 Partial fix · 1.26.4-6.1.rhaos4.13.git9eb9cf3.el9, 1.27.2-7.rhaos4.14.git1cc7a64.el9 +3 CWE-770