Red Hat OpenShift Container Platform IBM Z Systems

Cri-o: /etc/passwd tampering privesc

Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

Ocp & fips mode

Keycloak: session takeover with oidc offline refreshtokens

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

Keycloak: potential bypass of brute force protection

Keycloak: reflected xss via wildcard in oidc redirect_uri

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.