This advisory covers Red Hat OpenShift Container Platform 4.12.84, which provides bug fixes and security updates for multiple vulnerabilities identified by seven CVEs (CVE-2025-4953, CVE-2025-8677, CVE-2025-11561, CVE-2025-40778, CVE-2025-40780, CVE-2025-52881, CVE-2025-59375). The vulnerabilities affect components including podman (build context bind mount), expat (large dynamic memory allocations), sssd (Kerberos configuration privilege escalation), runc (container escape and denial of service), and bind (cache poisoning and resource exhaustion). Although the CVSS base scores are not provided, Red Hat Product Security has classified the overall security impact as Low. The advisory does not indicate any known exploits in the wild. Users should upgrade using the OpenShift CLI or web console following official upgrade instructions.

The vulnerabilities fixed in this update could potentially allow container escape, denial of service, privilege escalation, cache poisoning, and resource exhaustion. However, Red Hat has assessed the overall security impact of these issues as Low. There are no known exploits in the wild at the time of this advisory. The update improves the security posture of OpenShift Container Platform 4.12 by addressing these issues.

Red Hat advises all users of OpenShift Container Platform 4.12 to upgrade to version 4.12.84 when it becomes available through the appropriate release channels. Upgrades can be performed using the OpenShift CLI (oc) or the web console. Detailed upgrade instructions are provided in the official Red Hat documentation. Since this is an official security update with fixes included, applying the update is the recommended remediation. No additional mitigation steps are indicated by the vendor.