Skip to content
OpenAdvisories
High RHSA-2024:10520 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.17.7 security update

Published Dec 4, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.17::el9 microshift 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-greenboot 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-low-latency 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-multus 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-multus-release-info 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-networking 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-olm 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-olm-release-info 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-release-info 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
Red Hat · OpenShift 4 openshift:4.17::el9 microshift-selinux 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9

Vulnerabilities 1

  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2024-001
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258725
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10520.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-21626
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-21626
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-21626
  • article
    https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv