Loading story…
Red Hat released OpenShift Container Platform 4.14.52 under advisory RHSA-2025:7702, rated Important, updating platform packages and container images for OCP 4.14 deployments running on RHEL 8 and RHEL 9. The release applies across x86_64, ppc64le, s390x, and aarch64 architectures.
The update remediates six vulnerabilities: an out-of-bounds write in GRUB2; a denial-of-service issue in golang.org/x/crypto/ssh key exchange; two use-after-free flaws in libxslt; excessive memory allocation when parsing JWT headers in golang-jwt/jwt; and a libxml use-after-free vulnerability. Red Hat advises all affected OCP 4.14 customers to upgrade through the appropriate release channel using the OpenShift CLI or web console.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
Red Hat issued Important-rated advisory RHSA-2025:7702 and released OpenShift Container Platform 4.14.52 with updated packages and container images. The update remediates vulnerabilities including flaws in GRUB2, golang.org/x/crypto/ssh, libxslt, golang-jwt/jwt, and libxml, and applies to OCP 4.14 deployments on RHEL 8 and RHEL 9 across supported architectures.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat issued **Important** security and bug-fix updates for OpenShift Container Platform 4.14, 4.15, 4.16, 4.17, and 4.18, including releases 4.14.65, 4.15.64, 4.16.60, 4.17.54, 4.18.39, and 4.18.43. The updates refresh platform packages and container images across x86_64, s390x, ppc64le, and aarch64 deployments, addressing vulnerabilities in OpenSSH, libarchive, libpng, nghttp2, Vim, GRUB2, OpenSSL, sudo, and the Linux kernel. Affected flaws include `CVE-2026-25646`, an out-of-bounds read in libpng's `png_set_quantize()` that can cause an infinite loop and read past a heap buffer, and `CVE-2026-28421`, in which crafted Vim swap files can trigger heap-buffer overflow and denial of service during recovery. Other remediated issues can enable arbitrary code execution, command injection, information disclosure, memory corruption, or denial of service; Red Hat advised OpenShift administrators to upgrade packages and release images through their appropriate release channels using the web console or OpenShift CLI.
Aug 26, 2026
Red Hat released Important-rated updates for OpenShift Container Platform (OCP) 4.16.40 and 4.18.12 that remediate **CVE-2025-24855**, a use-after-free flaw in `libxslt` versions before 1.1.43. The defect resides in `numbers.c` and can occur during nested XPath evaluation when the XPath context node is modified and not restored; affected paths include `xsltNumberFormatGetValue`, `xsltEvalXPathPredicate`, `xsltEvalXPathStringNs`, and `xsltComputeSortResultInternal`. The OCP releases also fix the related `libxslt` use-after-free CVE-2024-55549. OCP 4.18.12 additionally addresses unauthenticated data exposure in `openshift-console` (CVE-2024-7128) and a `go-jose` parsing denial of service (CVE-2025-27144). Affected organizations running OCP 4.16 on RHEL 9 or OCP 4.18 on RHEL 8 or 9, across supported x86_64, s390x, ppc64le, and aarch64 platforms, should upgrade through their applicable OpenShift release channels.
Aug 27, 2026
Red Hat released **OpenShift Container Platform 4.14.62** as an **Important** security update for the 4.14 release stream, publishing new release images through the `openshift-release-dev/ocp-release` repository and the standard OpenShift upgrade channels. The advisory says the update bundles fixes across platform packages and container images, with affected builds spanning OpenShift deployments on **RHEL 8** and **RHEL 9**. The release addresses multiple vulnerabilities in bundled components, including **Scrapy**, **OpenSSL**, **libpng**, and **glib**. Red Hat highlighted a Python `brotli` decompression-bomb denial-of-service issue, several OpenSSL flaws that could enable **remote code execution**, **denial of service**, or **out-of-bounds read/write**, a `libpng` out-of-bounds read, and a `glib` integer overflow, and urged OpenShift 4.14 users to upgrade to **4.14.62** through the OpenShift CLI or web console using the appropriate release channel.
Aug 20, 2026