| Package | Affected versions | Patched versions |
|---|---|---|
| openshift container platform | = 4.12= 4.13= 4.14= 4.15= 4.16= 4.17 | |
| openshift container platform for arm64 | = 4.12= 4.13= 4.14= 4.15= 4.16 | |
| openshift container platform for ibm z | = 4.12= 4.13= 4.14= 4.15= 4.16 | |
| openshift container platform for linuxone | = 4.12= 4.13= 4.14= 4.15= 4.16 | |
| openshift container platform for power | = 4.12= 4.13= 4.14= 4.15= 4.16 |
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free