Loading story…
Red Hat released a series of OpenShift Container Platform security updates across supported branches, including 4.13.68, 4.15.66, 4.16.64, 4.18.44, and 4.19.33, to remediate vulnerabilities in bundled components and container images. The advisories cover deployments on RHEL 8 and RHEL 9 across x86_64, s390x, ppc64le, and aarch64, and Red Hat urged customers to upgrade through the appropriate release channel using the OpenShift CLI or web console.
The fixes address multiple privilege-escalation and memory-safety issues, notably CVE-2026-4878 in libcap, a TOCTOU race in cap_set_file() that can let an attacker influence capability assignment and gain root privileges, and CVE-2026-35385 in OpenSSH, where use of legacy scp with -O by root without -p can unexpectedly preserve setuid or setgid bits on downloaded files. Additional patched issues include Linux kernel flaws such as CVE-2026-43037, CVE-2026-46300, CVE-2026-46243, and **CVE-2026-46331, along with vulnerabilities in jqandrsync`, ranging from denial of service and out-of-bounds reads to local privilege escalation.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2026:28962 for OpenShift Container Platform 4.15.66 and rated it Critical. The update fixed CVE-2026-43037, CVE-2026-35385, CVE-2026-46243, and CVE-2026-46331 and advised OpenShift 4.15 users to upgrade through the appropriate release channel.
Red Hat published a critical advisory for OpenShift Container Platform 4.13.68 with updated packages and container images. The release addressed CVE-2026-4878, CVE-2026-35385, CVE-2026-39979, CVE-2026-40164, CVE-2026-41035, CVE-2026-43037, and CVE-2026-43284.
Red Hat released OpenShift Container Platform 4.16.64 as an Important security advisory. The update fixed multiple bundled-component vulnerabilities including CVE-2026-4878 in libcap and CVE-2026-35385 in OpenSSH.
Red Hat published a critical advisory for OpenShift Container Platform 4.18.44. The update fixed CVE-2026-43037, CVE-2026-4878, CVE-2026-35385, CVE-2026-39979, CVE-2026-40164, and CVE-2026-41035 across supported architectures.
Red Hat released OpenShift Container Platform 4.19.33 as an Important security and bug-fix update. The release addressed CVE-2026-4878 in libcap along with jq, rsync, and Linux kernel flaws including CVE-2026-46300.
Red Hat's Bugzilla record for CVE-2026-35385 says the vulnerability description was recorded by OSIDB Bzimport. The flaw affects OpenSSH before 10.3 and can cause scp downloads run as root with legacy protocol options to install files with unexpected setuid or setgid bits.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
8 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcedocs.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat issued **Important** security and bug-fix updates for OpenShift Container Platform 4.14, 4.15, 4.16, 4.17, and 4.18, including releases 4.14.65, 4.15.64, 4.16.60, 4.17.54, 4.18.39, and 4.18.43. The updates refresh platform packages and container images across x86_64, s390x, ppc64le, and aarch64 deployments, addressing vulnerabilities in OpenSSH, libarchive, libpng, nghttp2, Vim, GRUB2, OpenSSL, sudo, and the Linux kernel. Affected flaws include `CVE-2026-25646`, an out-of-bounds read in libpng's `png_set_quantize()` that can cause an infinite loop and read past a heap buffer, and `CVE-2026-28421`, in which crafted Vim swap files can trigger heap-buffer overflow and denial of service during recovery. Other remediated issues can enable arbitrary code execution, command injection, information disclosure, memory corruption, or denial of service; Red Hat advised OpenShift administrators to upgrade packages and release images through their appropriate release channels using the web console or OpenShift CLI.
Aug 26, 2026
Red Hat released a series of **OpenShift Container Platform 4.12** security and bug-fix updates, including versions **4.12.91**, **4.12.92**, **4.12.93**, and **4.12.96**, and urged customers to upgrade through their normal release channels. The updates affect deployments across **x86_64, ppc64le, s390x, and aarch64** on **RHEL 8** and **RHEL 9**, and primarily ship as refreshed container images, with some releases also including updated packages. Although several advisories were labeled **Important** or even **Critical**, Red Hat Product Security rated the overall impact of these OpenShift 4.12 releases as **Low**. The fixes span multiple components and vulnerabilities, including **OpenSSH**, **jq**, **sudo**, **nghttp2**, **libxslt/libxml2**, the **Linux kernel**, and virtualization-related flaws such as **CVE-2026-53359**, a KVM x86 shadow paging use-after-free issue, as well as **CVE-2025-10263**, an Arm processor privilege-escalation or information-disclosure flaw. Earlier releases also addressed **CVE-2026-35385**, **CVE-2026-39979**, **CVE-2026-40164**, **CVE-2026-43037**, **CVE-2026-1519**, **CVE-2026-46331**, and **CVE-2026-46243**. One advisory for **4.12.91** contained conflicting text stating `Security Fix(es): None` while simultaneously listing multiple CVEs, but Red Hat still recommended that all OpenShift 4.12 users apply the updates as they become available.
Aug 25, 2026
Red Hat released security updates for OpenShift Container Platform (OCP) release streams 4.13 through 4.22, including **4.19.43**, **4.20.34**, **4.21.29**, and **4.22.10**. The Important-rated updates deliver refreshed packages and container images for x86_64, s390x, ppc64le, and aarch64 deployments, including supported RHEL 8 and RHEL 9 variants. OCP 4.13.70 was rated Low, although its advisory lists fixes affecting the Linux kernel, OpenSSL, and SSSD. The fixes address vulnerabilities in the Linux kernel, Samba, SSSD, ICU, dnsmasq, OpenSSH, libarchive, rsync, Unbound, Vim, and other bundled components. Notable SSSD issues include **CVE-2026-14474**, which can enable privilege escalation through the sudo LDAP provider's directory-wide sudoRole search, and **CVE-2026-14476**, a GPO-cache path traversal flaw that can permit Kerberos authentication bypass. Red Hat advised administrators to upgrade affected clusters through their appropriate OpenShift release channels using the web console or OpenShift CLI.
Aug 25, 2026