Red Hat Security Advisory

RHSA-2024:6689

OpenShift Container Platform 4.14.37 bug fix and security update

Released 2024-09-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel8

Fixes 2 records

TI-2024-06847 CVE-2024-7387 · GHSA-qqv8-ph7f-h3f7

Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

HIGH 74

A flaw was found in openshift/builder.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02321 Published 2024-09-16 Fixed in v4.12.0-202409121032.p1.g609473f.assembly.stream.el8, v4.13.0-202409120505.p1.g2c7e99d.assembly.stream.el8 +167 CWE-250

TI-2024-30536 CVE-2024-45496 · GHSA-j8gh-87rx-c7w9

Openshift-controller-manager: elevated build pods can lead to node compromise in openshift

MEDIUM 45

A flaw was found in OpenShift.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01016 Published 2024-09-16 Fixed in v4.12.0-202409131137.p1.g0b1971a.assembly.stream.el8, v4.13.0-202409130707.p1.gb75d499.assembly.stream.el8 +168 CWE-269