Red Hat Security AdvisoryRHSA-2024:2669
OpenShift Container Platform 4.15.12 security update
Released 2024-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.15 cri-o-1.28.6-2.rhaos4.15.git77bbb1c.el8, cri-o-1.28.6-2.rhaos4.15.git77bbb1c.el9, podman-3:4.4.1-23.2.rhaos4.15.el8 +12
Fixes 3 records
Priority HIGH 72
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00457 · Published 2024-03-18 · Partial fix · 8090020240413110917.d7b6f4b7, 8090020240417184044.e7857ab1 +17 CWE-59
Priority LOW 37
A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01418 · Published 2024-04-26 · Fixed in 1.27.6, 1.28.6 +6 CWE-77
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409
