Loading story…
Red Hat released Important-rated updates for OpenShift Container Platform (OCP) 4.16.40 and 4.18.12 that remediate CVE-2025-24855, a use-after-free flaw in libxslt versions before 1.1.43. The defect resides in numbers.c and can occur during nested XPath evaluation when the XPath context node is modified and not restored; affected paths include xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.
The OCP releases also fix the related libxslt use-after-free CVE-2024-55549. OCP 4.18.12 additionally addresses unauthenticated data exposure in openshift-console (CVE-2024-7128) and a go-jose parsing denial of service (CVE-2025-27144). Affected organizations running OCP 4.16 on RHEL 9 or OCP 4.18 on RHEL 8 or 9, across supported x86_64, s390x, ppc64le, and aarch64 platforms, should upgrade through their applicable OpenShift release channels.
See affected versions and whether adversaries are exploiting it.
15 events from the most recent confirmed update back to the earliest known activity.
Red Hat stated that CVE-2025-24855 and CVE-2024-55549 had been incorrectly listed as fixed by the RHEL 7 ELS advisory RHSA-2025:3612, and removed both CVEs from its erratum. Red Hat said the correction involved no package changes, leaving the advisory with no listed CVEs.
Red Hat issued Important-rated RHSA-2025:4731 for OCP 4.16.40. The updated images and packages fix the libxslt use-after-free vulnerabilities CVE-2025-24855 and CVE-2024-55549, among other issues.
Red Hat issued Important-rated RHSA-2025:7496 for RHEL 10, providing libxslt-1.1.39-7.el10_0 packages for supported architectures. The update remediates the libxslt use-after-free vulnerabilities CVE-2025-24855 and CVE-2024-55549.
Red Hat issued Important-rated RHSA-2025:4431 for OpenShift Container Platform 4.17.28, providing updated container images that remediate libxslt use-after-free flaws CVE-2024-55549 and CVE-2025-24855, plus the Jinja2 sandbox-breakout CVE-2025-27516.
Red Hat issued Important-rated RHSA-2025:4427 for OCP 4.18.12, supplying updated container images that remediate CVE-2025-24855 along with CVE-2024-55549, CVE-2024-7128, and CVE-2025-27144.
Red Hat issued Important-rated RHSA-2025:4098 for RHEL 7 Extended Lifecycle Support, providing libxslt-1.1.28-9.el7_9 packages that remediate CVE-2025-24855 and CVE-2024-55549. The advisory notes that the prior RHSA-2025:3612 package release was missing patches for both vulnerabilities.
Red Hat issued Important-rated RHSA-2025:3619 for RHEL 8.2 Advanced Update Support, providing libxslt-1.1.32-6.el8_2 packages for applicable i686 and x86_64 systems. The update remediates CVE-2025-24855 and CVE-2024-55549.
Red Hat issued Important-rated RHSA-2025:3615 for standard and Extended Life Cycle RHEL 8.10 deployments, providing libxslt-1.1.32-6.1.el8_10 packages. The update remediates the libxslt use-after-free vulnerabilities CVE-2025-24855 and CVE-2024-55549.
Red Hat issued Important-rated RHSA-2025:3627 for RHEL 9.0 Update Services for SAP Solutions, providing libxslt-1.1.34-11.el9_0 packages for supported architectures. The update remediates the libxslt use-after-free vulnerabilities CVE-2025-24855 and CVE-2024-55549.
Red Hat issued Important-rated RHSA-2025:3624 for RHEL 8.8 support channels, providing libxslt-1.1.32-8.el8_8 packages for x86_64, s390x, ppc64le, and aarch64. The update remediates the libxslt use-after-free vulnerabilities CVE-2025-24855 and CVE-2024-55549.
Red Hat issued Important-rated RHSA-2025:3625 for supported RHEL 8.6 extended-support offerings, supplying libxslt-1.1.32-8.el8_6 packages. The update remediates CVE-2025-24855 and CVE-2024-55549.
Red Hat issued Important-rated RHSA-2025:3626 for specified RHEL 8.4 service channels, providing libxslt-1.1.32-8.el8_4 packages that remediate CVE-2025-24855 and CVE-2024-55549.
Red Hat issued Important-rated RHSA-2025:8303 for OpenShift Container Platform 4.12.77, providing updated packages and container images that remediate libxslt use-after-free vulnerabilities CVE-2024-55549 and CVE-2025-24855. The update applies to supported RHEL 8 and RHEL 9 OpenShift 4.12 deployments across x86_64, ppc64le, s390x, and aarch64.
After users reported xsltproc realloc failures and segmentation faults with libxslt-1.1.34-9.el9_5.2 when processing multiple exclude-result-prefixes namespaces, Marc LAUTIER reported that libxslt-1.1.34-9.el9_5.3 resolved the regression.
libxslt versions before 1.1.43 were identified as vulnerable to a use-after-free in numbers.c during nested XPath evaluations when the XPath context node is modified without being restored.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
15 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **OpenShift Container Platform 4.14.52** under advisory **RHSA-2025:7702**, rated Important, updating platform packages and container images for OCP 4.14 deployments running on RHEL 8 and RHEL 9. The release applies across `x86_64`, `ppc64le`, `s390x`, and `aarch64` architectures. The update remediates six vulnerabilities: an out-of-bounds write in GRUB2; a denial-of-service issue in `golang.org/x/crypto/ssh` key exchange; two use-after-free flaws in libxslt; excessive memory allocation when parsing JWT headers in `golang-jwt/jwt`; and a libxml use-after-free vulnerability. Red Hat advises all affected OCP 4.14 customers to upgrade through the appropriate release channel using the OpenShift CLI or web console.
Aug 26, 2026
Red Hat issued Important security updates for OpenShift Container Platform (OCP) 4.15, 4.16, and 4.17, delivering updated container images and packages across supported RHEL 8 and RHEL 9 deployments and x86_64, s390x, ppc64le, and aarch64 systems. OCP 4.15.44 fixes `CVE-2023-6597`, a Python `tempfile.TemporaryDirectory` path-traversal issue, and `CVE-2024-45338`, a non-linear parsing flaw in `golang.org/x/net/html`. OCP 4.16.42 and 4.17.32 address an OpenShift Console server-side request forgery (SSRF) flaw, alongside Go dependency issues involving OAuth2 JWS parsing memory consumption, HTML parsing, and zlib pointer arithmetic. Separately, OCP 4.17.26 remediates `CVE-2025-22869` in `golang.org/x/crypto/ssh`, `CVE-2025-30204` in `jwt-go` header parsing, and `CVE-2024-53150`, an out-of-bounds read in the Linux kernel ALSA USB-audio handling. Red Hat recommends affected customers upgrade through their applicable OpenShift release channel using the CLI or web console.
Aug 27, 2026
Red Hat released Important-rated security updates for **OpenShift Container Platform (OCP)** 4.15, 4.16, and 4.17, delivering refreshed container images and packages. The advisories address the `runc` file-descriptor leak tracked as **CVE-2024-21626**, the non-linear case-insensitive HTML parsing flaw in `golang.org/x/net/html` (**CVE-2024-45338**), and, in OCP 4.17.12, an OpenShift GraphQL introspection information-disclosure issue (**CVE-2024-50312**). OCP 4.16.32 also includes a fix for Python **CVE-2023-6597**. Later OCP releases additionally remediate **CVE-2024-53104**, an out-of-bounds-write vulnerability in the Linux kernel `uvcvideo` driver caused by parsing `UVC_VS_UNDEFINED` frames without accounting for them in frame-buffer sizing. Affected releases include OCP 4.15.43 and 4.15.46, 4.16.32 and 4.16.35, and 4.17.12 and 4.17.17, across supported RHEL 8 and RHEL 9 deployments on x86_64, aarch64, ppc64le, and s390x where applicable. Red Hat advises customers to upgrade through the appropriate OpenShift release channel using the CLI or web console.
Aug 27, 2026