Red Hat Security Advisory: OpenShift Container Platform 4.13.56 packages and security update

Fixed packages 129

Vulnerabilities 2

• High 8.6
  CVE-2024-11218

  Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

  A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enume…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Linux Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jan 22, 2025
• High 7.4
  CVE-2025-4953

  Podman: build context bind mount

  A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on th…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Go
  Sep 16, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2326231
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2703.json
• report
  https://access.redhat.com/security/cve/CVE-2024-11218
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-11218
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-11218
• article
  https://github.com/containers/buildah/pull/5918
• report
  https://access.redhat.com/security/cve/CVE-2025-4953
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2367235
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4953
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4953
• article
  https://github.com/containers/podman/pull/25173