Loading story…
Red Hat released OpenShift Container Platform 4.17.7 with updated RPM packages and images to remediate CVE-2023-44270, a moderate-severity improper input-validation vulnerability in PostCSS. The flaw can cause CSS placed inside comments to be interpreted as active code; an attacker able to supply untrusted CSS could cause PostCSS to emit malicious elements and compromise rendered page integrity.
Red Hat rated the issue CVSS 5.3 and said no mitigation is known beyond avoiding the parsing of untrusted CSS with PostCSS. The update applies to OpenShift 4.17 deployments on RHEL 8 and RHEL 9 for x86_64, ppc64le, s390x, and aarch64; administrators should upgrade clusters through the appropriate OpenShift release channel using the web console or OpenShift CLI.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2025:1249, which fixes CVE-2023-44270 in the discovery-server-rhel9 and discovery-ui-rhel9 components of Discovery 1 for RHEL 9.
Red Hat released RHSA-2025:0654, fixing CVE-2023-44270 for the ose-networking-console-plugin-rhel9 component in OpenShift Container Platform 4.17.
Red Hat published RHSA-2024:10517 for OpenShift Container Platform 4.17.7, providing updated RPM packages and images that remediate CVE-2023-44270 in PostCSS. The Moderate-severity advisory applies to OpenShift 4.17 deployments on RHEL 8 and RHEL 9 across supported architectures.
Red Hat lists RHSA-2024:6121 as fixing CVE-2023-44270 in several OpenShift Container Platform 4.18 RHEL 9 components, including ingress-node-firewall, kube-compare-artifacts, kubernetes-nmstate, and MetalLB packages and operators.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat issued Important security updates for OpenShift Container Platform (OCP) 4.15, 4.16, and 4.17, delivering updated container images and packages across supported RHEL 8 and RHEL 9 deployments and x86_64, s390x, ppc64le, and aarch64 systems. OCP 4.15.44 fixes `CVE-2023-6597`, a Python `tempfile.TemporaryDirectory` path-traversal issue, and `CVE-2024-45338`, a non-linear parsing flaw in `golang.org/x/net/html`. OCP 4.16.42 and 4.17.32 address an OpenShift Console server-side request forgery (SSRF) flaw, alongside Go dependency issues involving OAuth2 JWS parsing memory consumption, HTML parsing, and zlib pointer arithmetic. Separately, OCP 4.17.26 remediates `CVE-2025-22869` in `golang.org/x/crypto/ssh`, `CVE-2025-30204` in `jwt-go` header parsing, and `CVE-2024-53150`, an out-of-bounds read in the Linux kernel ALSA USB-audio handling. Red Hat recommends affected customers upgrade through their applicable OpenShift release channel using the CLI or web console.
Aug 27, 2026
Red Hat issued **Important** security and bug-fix updates for OpenShift Container Platform 4.14, 4.15, 4.16, 4.17, and 4.18, including releases 4.14.65, 4.15.64, 4.16.60, 4.17.54, 4.18.39, and 4.18.43. The updates refresh platform packages and container images across x86_64, s390x, ppc64le, and aarch64 deployments, addressing vulnerabilities in OpenSSH, libarchive, libpng, nghttp2, Vim, GRUB2, OpenSSL, sudo, and the Linux kernel. Affected flaws include `CVE-2026-25646`, an out-of-bounds read in libpng's `png_set_quantize()` that can cause an infinite loop and read past a heap buffer, and `CVE-2026-28421`, in which crafted Vim swap files can trigger heap-buffer overflow and denial of service during recovery. Other remediated issues can enable arbitrary code execution, command injection, information disclosure, memory corruption, or denial of service; Red Hat advised OpenShift administrators to upgrade packages and release images through their appropriate release channels using the web console or OpenShift CLI.
Aug 26, 2026
Red Hat released Important-rated updates for OpenShift Container Platform (OCP) 4.16.40 and 4.18.12 that remediate **CVE-2025-24855**, a use-after-free flaw in `libxslt` versions before 1.1.43. The defect resides in `numbers.c` and can occur during nested XPath evaluation when the XPath context node is modified and not restored; affected paths include `xsltNumberFormatGetValue`, `xsltEvalXPathPredicate`, `xsltEvalXPathStringNs`, and `xsltComputeSortResultInternal`. The OCP releases also fix the related `libxslt` use-after-free CVE-2024-55549. OCP 4.18.12 additionally addresses unauthenticated data exposure in `openshift-console` (CVE-2024-7128) and a `go-jose` parsing denial of service (CVE-2025-27144). Affected organizations running OCP 4.16 on RHEL 9 or OCP 4.18 on RHEL 8 or 9, across supported x86_64, s390x, ppc64le, and aarch64 platforms, should upgrade through their applicable OpenShift release channels.
Aug 27, 2026