Red Hat Security Advisory

RHSA-2025:1908

OpenShift Container Platform 4.18.2 packages and security update

Released 2025-03-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.18 buildah-2:1.33.12-1.rhaos4.18.el9, buildah-tests-2:1.33.12-1.rhaos4.18.el9, cri-o-1.31.5-5.rhaos4.18.git6dfa0a6.el8 +1

Fixes 2 records

TI-2024-10392 CVE-2024-11218 · GHSA-5vpc-35f4-r8w6

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

LOW 39

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00365 Published 2025-01-22 Partial fix · 1.33.12, 1.35.5 +197 CWE-269

TI-2024-08048 CVE-2024-8676 · GHSA-7p9f-6x8j-gxxp

Cri-o: checkpoint restore can be triggered from different namespaces

LOW 36

A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0075 Published 2024-11-26 Partial fix · 1.29.11, 1.30.8 +7 CWE-285