Red Hat Security Advisory: OpenShift Container Platform 4.16.33 packages and security update

Fixed packages 24

Vulnerabilities 3

• High 8.6
  CVE-2024-11218

  Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

  A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enume…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Linux Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jan 22, 2025
• Medium 5.4
  CVE-2024-56201

  Jinja has a sandbox breakout through malicious filenames

  Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox…

  pallets jinja kserve-storage-controller kserve-agent Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Dec 23, 2024
• Medium 5.4
  CVE-2024-56326

  Jinja has a sandbox breakout through indirect reference to format method

  Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability…

  pallets jinja kserve-storage-controller kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Dec 23, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2326231
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2333854
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2333856
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0830.json
• report
  https://access.redhat.com/security/cve/CVE-2024-11218
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-11218
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-11218
• article
  https://github.com/containers/buildah/pull/5918
• report
  https://access.redhat.com/security/cve/CVE-2024-56201
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-56201
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-56201
• article
  https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f
• article
  https://github.com/pallets/jinja/issues/1792
• article
  https://github.com/pallets/jinja/releases/tag/3.1.5
• article
  https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699
• report
  https://access.redhat.com/security/cve/CVE-2024-56326
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-56326
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-56326
• article
  https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4
• article
  https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h