Loading story…
Red Hat released security updates for OpenShift Container Platform 4.12, 4.17, and 4.18, delivering updated container images and packages through the supported release channels. The advisories address CVE-2025-32462, a sudo flaw that permits misuse of the -h/--host option outside privilege-listing operations and can enable local privilege escalation under applicable sudoers rules, affecting Red Hat Enterprise Linux and multiple OpenShift releases.
The updates also remediate CVE-2025-22868 in golang.org/x/oauth2/jws, where JWS token parsing can trigger unexpected memory consumption. OpenShift 4.17.35 additionally fixes node pull-credential overwrite, HTTP request smuggling in Go net/http, and unsafe library-path searching by static setuid glibc binaries; OpenShift 4.18.16 also includes a fix for CVE-2016-9840 in zlib. Red Hat advises affected organizations to upgrade their clusters using the OpenShift CLI or web console.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Important advisory RHSA-2025:13289 and released OpenShift Container Platform 4.14.55 with updated images and packages. The update remediated vulnerabilities including CVE-2025-32462 in sudo, CVE-2025-6021 in libxml2, and CVE-2024-45339 in github.com/golang/glog.
Red Hat issued Important advisory RHSA-2025:12323 and released OpenShift Container Platform 4.12.79. The update remediated CVE-2025-22868 and CVE-2025-32462, a sudo host-option flaw that could enable local privilege escalation depending on sudoers rules.
Red Hat issued Important advisory RHSA-2025:10767 and released OpenShift Container Platform 4.18.20 with updated container images, security fixes, bug fixes, and enhancements. The release addressed CVE-2025-32462, a sudo host-option local privilege-escalation flaw, and CVE-2025-22871, a Go net/http HTTP request-smuggling flaw.
Red Hat issued Important advisory RHSA-2025:10294 for OpenShift Container Platform 4.17.35. The release fixed node pull-credential overwrite (CVE-2024-45497), JWS parsing memory consumption (CVE-2025-22868), Go HTTP request smuggling (CVE-2025-22871), and unsafe glibc library-path searching (CVE-2025-4802).
Red Hat issued Important advisory RHSA-2025:8284 and released OpenShift Container Platform 4.18.16 with updated images and packages. The update addressed, among other issues, CVE-2016-9840 in zlib and CVE-2025-22868 in golang.org/x/oauth2/jws.
Red Hat addressed CVE-2024-45339, a predictable glog log-file path flaw that can let local attackers overwrite files through planted symlinks, in OpenShift Container Platform 4.12 through 4.19. The remediation was delivered through multiple RHSA advisories, including RHSA-2025:12325, RHSA-2025:12370, RHSA-2025:11681, RHSA-2025:12437, RHSA-2025:11677, and RHSA-2025:11673.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
8 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released security updates across **OpenShift Container Platform (OCP) 4.12 through 4.16** and OpenShift Serverless, remediating vulnerabilities in bundled Go, Linux kernel, glibc, OpenTelemetry, BIND, Ironic, Gunicorn, Werkzeug, and related components. The issues include HTTP/2 and multipart-form memory-exhaustion denial of service—such as `CVE-2023-45288` and `CVE-2023-45290`—sensitive URL data written to logs (`CVE-2024-6104`), cluster-monitoring credential leakage, unauthenticated local access and data exposure in OpenStack Ironic, and an SSH prefix-truncation attack. OpenShift 4.16.0 addressed 16 vulnerabilities, while the 4.14.39 update also fixed a glibc `iconv` out-of-bounds write that may allow remote code execution. Affected organizations should update OCP container images and packages through their supported release channels using the OpenShift CLI or web console, prioritizing deployed 4.12, 4.14, 4.15, and 4.16 clusters. The advisories cover RHEL 8 and RHEL 9 deployments across `x86_64`, `s390x`, `ppc64le`, and `aarch64` where applicable; OpenShift Serverless 1.33.0 also updates Serverless Operator components for OCP 4.12–4.16. Red Hat separately updated the RHEL 9 Go toolchain to version `golang-1.21.9-2.el9_4`, addressing HTTP processing, certificate-verification, redirect-forwarding, template escaping, and cryptographic flaws that affect Go-based workloads and platform components.
Aug 27, 2026
Red Hat released Important-rated OpenShift Container Platform updates for versions 4.15, 4.16, 4.17, and 4.18, including 4.15.50, 4.16.33, 4.17.25, 4.18.8, and 4.18.9. The releases remediate **CVE-2025-30204**, a high-severity denial-of-service flaw in `golang-jwt/jwt` where JWT header parsing can cause excessive memory allocation from attacker-controlled tokens containing numerous period characters. Fixed upstream versions are 4.5.2 and 5.2.2. The updates also address **CVE-2024-11218**, a Podman/Buildah race condition that can enable container breakout, plus flaws in GRUB2, libxml2, Jinja2, BIND, and go-jose. Several releases fix **CVE-2025-29781**, in which the Bare Metal Operator's `BMCEventSubscription` custom resource could expose secrets across namespaces. Red Hat advises affected organizations to upgrade clusters through their applicable OpenShift release channels using the OpenShift CLI or web console across supported RHEL 8 and RHEL 9 platforms.
Aug 27, 2026
Red Hat issued Important security updates for OpenShift Container Platform (OCP) 4.15, 4.16, and 4.17, delivering updated container images and packages across supported RHEL 8 and RHEL 9 deployments and x86_64, s390x, ppc64le, and aarch64 systems. OCP 4.15.44 fixes `CVE-2023-6597`, a Python `tempfile.TemporaryDirectory` path-traversal issue, and `CVE-2024-45338`, a non-linear parsing flaw in `golang.org/x/net/html`. OCP 4.16.42 and 4.17.32 address an OpenShift Console server-side request forgery (SSRF) flaw, alongside Go dependency issues involving OAuth2 JWS parsing memory consumption, HTML parsing, and zlib pointer arithmetic. Separately, OCP 4.17.26 remediates `CVE-2025-22869` in `golang.org/x/crypto/ssh`, `CVE-2025-30204` in `jwt-go` header parsing, and `CVE-2024-53150`, an out-of-bounds read in the Linux kernel ALSA USB-audio handling. Red Hat recommends affected customers upgrade through their applicable OpenShift release channel using the CLI or web console.
Aug 27, 2026