Loading story…
Red Hat released a series of OpenShift Container Platform 4.12 security and bug-fix updates, including versions 4.12.91, 4.12.92, 4.12.93, and 4.12.96, and urged customers to upgrade through their normal release channels. The updates affect deployments across x86_64, ppc64le, s390x, and aarch64 on RHEL 8 and RHEL 9, and primarily ship as refreshed container images, with some releases also including updated packages. Although several advisories were labeled Important or even Critical, Red Hat Product Security rated the overall impact of these OpenShift 4.12 releases as Low.
The fixes span multiple components and vulnerabilities, including OpenSSH, jq, sudo, nghttp2, libxslt/libxml2, the Linux kernel, and virtualization-related flaws such as CVE-2026-53359, a KVM x86 shadow paging use-after-free issue, as well as CVE-2025-10263, an Arm processor privilege-escalation or information-disclosure flaw. Earlier releases also addressed CVE-2026-35385, CVE-2026-39979, CVE-2026-40164, CVE-2026-43037, CVE-2026-1519, CVE-2026-46331, and CVE-2026-46243. One advisory for 4.12.91 contained conflicting text stating Security Fix(es): None while simultaneously listing multiple CVEs, but Red Hat still recommended that all OpenShift 4.12 users apply the updates as they become available.
See real exploitation activity before you spend the cycle.
5 events from the most recent confirmed update back to the earliest known activity.
Red Hat announced OpenShift Container Platform 4.12.96 as a bug fix and security update release for OpenShift 4.12, with overall Low security impact. The advisory says the release contains updated container images and references fixes for CVE-2025-10263 and CVE-2026-53359.
Red Hat announced OpenShift Container Platform 4.12.93 as a bug fix and security update release for OpenShift 4.12, rated Low impact. The advisory says the update includes refreshed packages and container images and references fixes for CVE-2026-1519, CVE-2026-46331, and CVE-2026-46243.
Red Hat announced OpenShift Container Platform 4.12.92 as a bug fix and security update for OpenShift 4.12, with Low security impact according to Red Hat Product Security. The release updates packages and container images and lists fixes associated with CVE-2026-35385, CVE-2026-39979, CVE-2026-40164, and CVE-2026-43037.
Red Hat announced OpenShift Container Platform 4.12.91 as a bug fix and security update for the 4.12 release stream, rated Low impact by Red Hat Product Security. The advisory says the release includes updated container images and addresses multiple CVEs including flaws in libxslt/libxml2, OpenSSH, nghttp2, sudo, and the Linux kernel.
Red Hat released OpenShift Container Platform 4.12.88 as a bug-fix and security update with updated container images and packages, rated Low impact by Red Hat Product Security. The update addresses nine CVEs in libpng, Vim, and libarchive, including flaws enabling information disclosure, denial of service, heap corruption, and potential code execution.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceredhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released a series of OpenShift Container Platform security updates across supported branches, including **4.13.68**, **4.15.66**, **4.16.64**, **4.18.44**, and **4.19.33**, to remediate vulnerabilities in bundled components and container images. The advisories cover deployments on **RHEL 8** and **RHEL 9** across `x86_64`, `s390x`, `ppc64le`, and `aarch64`, and Red Hat urged customers to upgrade through the appropriate release channel using the OpenShift CLI or web console. The fixes address multiple privilege-escalation and memory-safety issues, notably **CVE-2026-4878** in `libcap`, a TOCTOU race in `cap_set_file()` that can let an attacker influence capability assignment and gain root privileges, and **CVE-2026-35385** in OpenSSH, where use of legacy `scp` with `-O` by root without `-p` can unexpectedly preserve `setuid` or `setgid` bits on downloaded files. Additional patched issues include Linux kernel flaws such as **CVE-2026-43037**, **CVE-2026-46300**, **CVE-2026-46243**, and **CVE-2026-46331`, along with vulnerabilities in `jq` and `rsync`, ranging from denial of service and out-of-bounds reads to local privilege escalation.
Aug 25, 2026
Red Hat released multiple security updates for **OpenShift Container Platform 4.12**, including versions **4.12.84** and **4.12.87**, and urged customers to upgrade through the appropriate release channel using the OpenShift CLI or web console. The advisories cover updated RPMs and container images across **RHEL 8** and **RHEL 9** deployments for `x86_64`, `ppc64le`, `s390x`, and `aarch64`, and address several flaws in bundled components. Among the issues fixed are `runc` container escape vulnerabilities **CVE-2025-31133**, **CVE-2025-52565**, and **CVE-2025-52881**, as well as the `grub2` use-after-free flaw **CVE-2025-61662**. A broader OpenShift 4.12 advisory also included fixes for vulnerabilities in **podman**, **expat**, **sssd**, `runc`, and **bind**. Red Hat-linked bug reports describe **CVE-2025-4953** as a Podman image-build issue that could temporarily expose sensitive build-context files to unprivileged local users, and **CVE-2025-11561** as an SSSD Kerberos configuration weakness that could let attackers who can alter Active Directory attributes impersonate privileged accounts on AD-joined Linux systems. Although the notices were labeled **Important** in the portal, Red Hat Product Security rated the OpenShift updates' overall impact as **Low**.
Aug 20, 2026
Red Hat released security updates for OpenShift Container Platform (OCP) release streams 4.13 through 4.22, including **4.19.43**, **4.20.34**, **4.21.29**, and **4.22.10**. The Important-rated updates deliver refreshed packages and container images for x86_64, s390x, ppc64le, and aarch64 deployments, including supported RHEL 8 and RHEL 9 variants. OCP 4.13.70 was rated Low, although its advisory lists fixes affecting the Linux kernel, OpenSSL, and SSSD. The fixes address vulnerabilities in the Linux kernel, Samba, SSSD, ICU, dnsmasq, OpenSSH, libarchive, rsync, Unbound, Vim, and other bundled components. Notable SSSD issues include **CVE-2026-14474**, which can enable privilege escalation through the sudo LDAP provider's directory-wide sudoRole search, and **CVE-2026-14476**, a GPO-cache path traversal flaw that can permit Kerberos authentication bypass. Red Hat advised administrators to upgrade affected clusters through their appropriate OpenShift release channels using the web console or OpenShift CLI.
Aug 25, 2026