Red Hat Security Advisory: OpenShift Container Platform 4.18.2 packages and security update

Fixed packages 11

Vulnerabilities 2

• High 8.6
  CVE-2024-11218

  Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

  A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enume…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Linux Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jan 22, 2025
• High 7.4
  CVE-2024-8676

  Cri-o: checkpoint restore can be triggered from different namespaces

  A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. A…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat OpenShift Container Platform 4 Linux Azure Linux Go
  Nov 26, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2313842
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2326231
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1908.json
• report
  https://access.redhat.com/security/cve/CVE-2024-8676
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-8676
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-8676
• report
  https://access.redhat.com/security/cve/CVE-2024-11218
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-11218
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-11218
• article
  https://github.com/containers/buildah/pull/5918