Red Hat Security Advisory

RHSA-2025:0650

OpenShift Container Platform 4.16.32 bug fix and security update

Released 2025-01-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-baremetal-machine-controllers-rhel9, openshift4/ose-docker-builder-rhel9 +4

Fixes 3 records

TI-2024-14351 CVE-2024-21626 · GHSA-xr7r-f8xq-vfvv

runc container breakout through process.cwd trickery and leaked fds

HIGH 72

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.18923 Published 2024-01-31 Partial fix · 1.1.12 CWE-403

TI-2023-06044 CVE-2023-6597 · GHSA-797f-63wg-8chv

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions…

LOW 36

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

CVSS 3.1HIGH 7.8 Local No auth No interaction EPSS 0.00313 Published 2024-03-19 Fixed in 3.8.19, 3.9.19 +4

TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333