Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-42044

[build] Ensure Git Clone Does Not Run Privileged

XMLWordPrintable

      Description of problem:

      With the disclosure and patch of CVE-2024-45496, we must ensure that future versions of OpenShift do not allow the git clone container to run privileged. Git has fundamental weaknesses which allow a potential attacker with "edit" permissions to execute arbitrary commands.
          

      Version-Release number of selected component (if applicable):

      4.18
          

      How reproducible:

      Always
          

      Steps to Reproduce:

      N/A
          

      Actual results:

      N/A
          

      Expected results:

      N/A
          

      Additional info:

      See [CVE-2024-45496|https://access.redhat.com/security/cve/CVE-2024-45496]
          

              adkaplan@redhat.com Adam Kaplan
              adkaplan@redhat.com Adam Kaplan
              Jitendar Singh Jitendar Singh
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: