Red Hat Security Advisory

RHSA-2025:2703

OpenShift Container Platform 4.13.56 packages and security update

Released 2025-03-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 bpftool-7.0.0-284.109.1.el9_2, buildah-1:1.29.5-1.rhaos4.13.el8, buildah-1:1.29.5-1.rhaos4.13.el9 +47

Fixes 2 records

TI-2024-10392 CVE-2024-11218 · GHSA-5vpc-35f4-r8w6

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

LOW 39

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00365 Published 2025-01-22 Partial fix · 1.33.12, 1.35.5 +197 CWE-269

TI-2025-04441 CVE-2025-4953 · GHSA-m68q-4hqr-mc6f

Podman: build context bind mount

LOW 35

A flaw was found in Podman.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00639 Published 2025-09-16 Fixed in 8100020250911075811.afee755d, 3:4.2.0-15.rhaos4.12.el9 +28 CWE-378