Loading story…
Red Hat released security updates for OpenShift Container Platform (OCP) release streams 4.13 through 4.22, including 4.19.43, 4.20.34, 4.21.29, and 4.22.10. The Important-rated updates deliver refreshed packages and container images for x86_64, s390x, ppc64le, and aarch64 deployments, including supported RHEL 8 and RHEL 9 variants. OCP 4.13.70 was rated Low, although its advisory lists fixes affecting the Linux kernel, OpenSSL, and SSSD.
The fixes address vulnerabilities in the Linux kernel, Samba, SSSD, ICU, dnsmasq, OpenSSH, libarchive, rsync, Unbound, Vim, and other bundled components. Notable SSSD issues include CVE-2026-14474, which can enable privilege escalation through the sudo LDAP provider's directory-wide sudoRole search, and CVE-2026-14476, a GPO-cache path traversal flaw that can permit Kerberos authentication bypass. Red Hat advised administrators to upgrade affected clusters through their appropriate OpenShift release channels using the web console or OpenShift CLI.
See real exploitation activity before you spend the cycle.
18 events from the most recent confirmed update back to the earliest known activity.
Red Hat published RHSA-2026:46990 for SSSD on RHEL 8, fixing CVE-2026-14474, a sudo LDAP-provider privilege-escalation issue, and CVE-2026-14476, a GPO cache path-traversal flaw enabling Kerberos authentication bypass.
OSIDB Bzimport recorded CVE-2025-61662, in which GRUB2's gettext command remains registered after its module unloads and can access freed memory.
Red Hat released a Low-rated OpenShift 4.13.70 security and bug-fix update addressing vulnerabilities in the kernel, OpenSSL, and SSSD.
Red Hat issued an Important-rated OpenShift 4.19.43 update fixing six vulnerabilities in the kernel, SSSD, ICU, and dnsmasq, including SSSD privilege escalation and Kerberos authentication bypass flaws.
Red Hat released an Important-rated OpenShift 4.20.34 update addressing vulnerabilities in the kernel, Samba, SSSD, and ICU, including privilege escalation and Kerberos authentication-bypass issues.
Red Hat issued an Important-rated OpenShift 4.22.10 update fixing numerous vulnerabilities in the kernel, Samba, SSSD, sg3_utils, rsync, Unbound, Vim, OpenSSH, libarchive, and acl.
Red Hat released an Important-rated OpenShift 4.21.29 update addressing kernel, Samba, and SSSD vulnerabilities, including CVE-2026-1933 and the two SSSD flaws CVE-2026-14474 and CVE-2026-14476.
Red Hat issued an Important-rated OpenShift 4.17.56 update addressing CVE-2026-43329 in netfilter flowtable, CVE-2026-46243 in the SMB client, and CVE-2026-46323 in net/gro.
Red Hat released an Important-rated OpenShift 4.14.70 update fixing kernel netfilter CVE-2026-43329, glibc heap overflow CVE-2026-5450, and OpenSSL information disclosure CVE-2026-31790.
Red Hat issued an Important-rated OpenShift 4.15.67 update remediating a BIND DNSSEC denial-of-service flaw, a glibc scanf heap overflow, and OpenSSL information disclosure CVE-2026-31790.
Red Hat issued an Important-rated OpenShift 4.18.50 update fixing CVE-2026-43329 in netfilter flowtable, CVE-2026-46323 in net/gro, and CVE-2026-53359 in KVM x86 shadow paging.
Red Hat released an Important-rated OpenShift 4.19.40 update addressing kernel netfilter, eventpoll, KVM, and net/gro flaws, plus OpenSSL information disclosure CVE-2026-31790.
Red Hat released an Important-rated OpenShift 4.21.26 update with fixes for CVE-2026-43329 in kernel netfilter flowtable and CVE-2026-46323 in net/gro.
Red Hat issued an Important-rated OpenShift 4.20.31 update that fixes kernel netfilter flowtable flaw CVE-2026-43329 and net/gro use-after-free CVE-2026-46323.
Red Hat issued a Low-rated OpenShift 4.13.67 security update addressing vulnerabilities in OpenSSH, nghttp2, libarchive, sudo, and the Linux kernel.
Red Hat released an Important-rated OpenShift 4.19.32 update fixing vulnerabilities in OpenSSH, libarchive, nghttp2, and sudo, including privilege-escalation and arbitrary-code-execution flaws.
Red Hat addressed the GRUB2 gettext-command use-after-free through advisories for RHEL 7 through 10 variants and OpenShift Container Platform releases 4.12 through 4.19.
Red Hat issued an Important-rated OpenShift 4.19.28 security and bug-fix update addressing seven flaws in libpng, Vim, Expat, and GRUB2, including CVE-2025-61662.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
17 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released multiple security updates for **OpenShift Container Platform 4.12**, including versions **4.12.84** and **4.12.87**, and urged customers to upgrade through the appropriate release channel using the OpenShift CLI or web console. The advisories cover updated RPMs and container images across **RHEL 8** and **RHEL 9** deployments for `x86_64`, `ppc64le`, `s390x`, and `aarch64`, and address several flaws in bundled components. Among the issues fixed are `runc` container escape vulnerabilities **CVE-2025-31133**, **CVE-2025-52565**, and **CVE-2025-52881**, as well as the `grub2` use-after-free flaw **CVE-2025-61662**. A broader OpenShift 4.12 advisory also included fixes for vulnerabilities in **podman**, **expat**, **sssd**, `runc`, and **bind**. Red Hat-linked bug reports describe **CVE-2025-4953** as a Podman image-build issue that could temporarily expose sensitive build-context files to unprivileged local users, and **CVE-2025-11561** as an SSSD Kerberos configuration weakness that could let attackers who can alter Active Directory attributes impersonate privileged accounts on AD-joined Linux systems. Although the notices were labeled **Important** in the portal, Red Hat Product Security rated the OpenShift updates' overall impact as **Low**.
Aug 20, 2026
Red Hat issued **Important** security and bug-fix updates for OpenShift Container Platform 4.14, 4.15, 4.16, 4.17, and 4.18, including releases 4.14.65, 4.15.64, 4.16.60, 4.17.54, 4.18.39, and 4.18.43. The updates refresh platform packages and container images across x86_64, s390x, ppc64le, and aarch64 deployments, addressing vulnerabilities in OpenSSH, libarchive, libpng, nghttp2, Vim, GRUB2, OpenSSL, sudo, and the Linux kernel. Affected flaws include `CVE-2026-25646`, an out-of-bounds read in libpng's `png_set_quantize()` that can cause an infinite loop and read past a heap buffer, and `CVE-2026-28421`, in which crafted Vim swap files can trigger heap-buffer overflow and denial of service during recovery. Other remediated issues can enable arbitrary code execution, command injection, information disclosure, memory corruption, or denial of service; Red Hat advised OpenShift administrators to upgrade packages and release images through their appropriate release channels using the web console or OpenShift CLI.
Aug 26, 2026
Red Hat released a series of OpenShift Container Platform security updates across supported branches, including **4.13.68**, **4.15.66**, **4.16.64**, **4.18.44**, and **4.19.33**, to remediate vulnerabilities in bundled components and container images. The advisories cover deployments on **RHEL 8** and **RHEL 9** across `x86_64`, `s390x`, `ppc64le`, and `aarch64`, and Red Hat urged customers to upgrade through the appropriate release channel using the OpenShift CLI or web console. The fixes address multiple privilege-escalation and memory-safety issues, notably **CVE-2026-4878** in `libcap`, a TOCTOU race in `cap_set_file()` that can let an attacker influence capability assignment and gain root privileges, and **CVE-2026-35385** in OpenSSH, where use of legacy `scp` with `-O` by root without `-p` can unexpectedly preserve `setuid` or `setgid` bits on downloaded files. Additional patched issues include Linux kernel flaws such as **CVE-2026-43037**, **CVE-2026-46300**, **CVE-2026-46243**, and **CVE-2026-46331`, along with vulnerabilities in `jq` and `rsync`, ranging from denial of service and out-of-bounds reads to local privilege escalation.
Aug 25, 2026