Red Hat Security Advisory

RHSA-2025:0830

OpenShift Container Platform 4.16.33 packages and security update

Released 2025-02-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Ironic content for Red Hat OpenShift Container Platform 4.16 python-jinja2-3.0.1-6.el9.2, python3-jinja2-3.0.1-6.el9.2
Red Hat OpenShift Container Platform 4.16 podman-4:4.9.4-13.rhaos4.16.el8, podman-4:4.9.4-15.rhaos4.16.el9, podman-catatonit-4:4.9.4-13.rhaos4.16.el8 +9

Fixes 3 records

TI-2024-10392 CVE-2024-11218 · GHSA-5vpc-35f4-r8w6

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

LOW 39

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00365 Published 2025-01-22 Partial fix · 1.33.12, 1.35.5 +197 CWE-269

TI-2024-37287 CVE-2024-56326 · GHSA-q2x7-8rv6-6q7h

Jinja has a sandbox breakout through indirect reference to format method

LOW 27

Jinja is an extensible templating engine.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00522 Published 2024-12-23 Partial fix · 3.1.5 CWE-1336

TI-2024-37171 CVE-2024-56201 · GHSA-gmj6-6f8f-6699

Jinja has a sandbox breakout through malicious filenames

LOW 26

Jinja is an extensible templating engine.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00307 Published 2024-12-23 Partial fix · 3.1.5 CWE-150