Loading story…
Red Hat released OpenShift Container Platform 4.16.25 and 4.17.7 with fixes for CVE-2024-7409, a QEMU flaw that can let an unauthenticated remote attacker crash a temporary Network Block Device (NBD) server during storage migration. An attacker can open a second socket, stall its NBD handshake before TLS negotiation, and trigger socket closure after the temporary server stops; the condition is reachable even where the NBD server requires valid TLS credentials.
The OpenShift 4.16.25 update also remediates CVE-2024-10963 in PAM/pam_access and CVE-2024-24968 in microcode_ctl, while version 4.17.7 additionally fixes CVE-2024-10963, sensitive-information logging in go-retryablehttp (CVE-2024-6104), and a regular-expression DoS in cross-spawn (CVE-2024-21538). Red Hat also issued fixes for affected RHEL 8 and 9 variants; administrators should upgrade OpenShift through the appropriate release channel and apply the relevant Red Hat errata.
See real exploitation activity before you spend the cycle.
5 events from the most recent confirmed update back to the earliest known activity.
Red Hat published Moderate advisory RHSA-2024:10908 for OpenShift Service Mesh Containers 2.5.7. It remediated cross-spawn regular-expression denial of service CVE-2024-21538 in Kiali containers and PostCSS improper input validation CVE-2023-44270 in the openshift-istio-kiali-rhel8 container.
Red Hat issued Important advisory RHSA-2024:10528, releasing OpenShift Container Platform 4.16.25 for RHEL 9 architectures. The update addressed CVE-2024-10963 in PAM, CVE-2024-7409 in the QEMU NBD server, and the microcode_ctl denial-of-service flaw CVE-2024-24968.
Red Hat released Important advisory RHSA-2024:10518 for OpenShift Container Platform 4.17.7 with refreshed container images. It addressed flaws including PAM access-control bypass CVE-2024-10963, QEMU NBD-server denial of service CVE-2024-7409, sensitive-information logging CVE-2024-6104, and cross-spawn ReDoS CVE-2024-21538.
Red Hat issued Important advisory RHSA-2024:5194, updating the container-tools:rhel8 module for RHEL 8.8. The update remediated CVE-2024-6104, which could log sensitive URL information, and CVE-2024-37298, a gorilla/schema memory-exhaustion flaw.
Red Hat released Moderate-severity advisory RHSA-2024:6818 for OpenShift Container Platform 4.15.34, including updated container images for RHEL 8 and RHEL 9 architectures. The release remediated the QEMU NBD-server denial-of-service flaw CVE-2024-7409 and included multiple operational fixes affecting OLM, EgressIP, HyperShift, image registry, and other components.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important-rated OpenShift Container Platform updates for versions 4.15, 4.16, 4.17, and 4.18, including 4.15.50, 4.16.33, 4.17.25, 4.18.8, and 4.18.9. The releases remediate **CVE-2025-30204**, a high-severity denial-of-service flaw in `golang-jwt/jwt` where JWT header parsing can cause excessive memory allocation from attacker-controlled tokens containing numerous period characters. Fixed upstream versions are 4.5.2 and 5.2.2. The updates also address **CVE-2024-11218**, a Podman/Buildah race condition that can enable container breakout, plus flaws in GRUB2, libxml2, Jinja2, BIND, and go-jose. Several releases fix **CVE-2025-29781**, in which the Bare Metal Operator's `BMCEventSubscription` custom resource could expose secrets across namespaces. Red Hat advises affected organizations to upgrade clusters through their applicable OpenShift release channels using the OpenShift CLI or web console across supported RHEL 8 and RHEL 9 platforms.
Aug 27, 2026
Red Hat issued **Important** security and bug-fix updates for OpenShift Container Platform 4.14, 4.15, 4.16, 4.17, and 4.18, including releases 4.14.65, 4.15.64, 4.16.60, 4.17.54, 4.18.39, and 4.18.43. The updates refresh platform packages and container images across x86_64, s390x, ppc64le, and aarch64 deployments, addressing vulnerabilities in OpenSSH, libarchive, libpng, nghttp2, Vim, GRUB2, OpenSSL, sudo, and the Linux kernel. Affected flaws include `CVE-2026-25646`, an out-of-bounds read in libpng's `png_set_quantize()` that can cause an infinite loop and read past a heap buffer, and `CVE-2026-28421`, in which crafted Vim swap files can trigger heap-buffer overflow and denial of service during recovery. Other remediated issues can enable arbitrary code execution, command injection, information disclosure, memory corruption, or denial of service; Red Hat advised OpenShift administrators to upgrade packages and release images through their appropriate release channels using the web console or OpenShift CLI.
Aug 26, 2026
Red Hat shipped a series of OpenShift Container Platform security updates across supported release streams, including **4.12.86**, **4.13.64**, **4.17.50**, and **4.19.25**, to remediate multiple flaws in bundled components. The fixes cover `CVE-2025-9230` in OpenSSL, an out-of-bounds read and write in CMS password-based encryption handling that can crash applications or corrupt memory; `CVE-2025-6176` in Scrapy, where brotli decompression can trigger denial of service through excessive memory consumption; `CVE-2025-52881` in `runc` and `opencontainers-selinux`, which can enable container escape and denial of service; and `CVE-2025-61726` in Go's `net/url` package, which can cause memory exhaustion during query parsing. Red Hat rated the OpenShift 4.17 and 4.19 releases as **Important** because of the container escape and resource-exhaustion risks, while updates for 4.12 and 4.13 were published with **Low** security impact despite bundling fixes for OpenSSL, Scrapy/brotli, libssh, glib, and libpng issues. The advisories affect deployments on **RHEL 8** and **RHEL 9** across `x86_64`, `ppc64le`, `s390x`, and `aarch64`, and Red Hat urged customers to upgrade through the appropriate OpenShift release channels using the CLI or web console.
Aug 20, 2026