Red Hat OpenShift Container Platform

A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.

IBM Robotic Process Automation for Cloud Pak information disclosure

Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply

Libxml2: libxml2: denial of service via crafted xml catalogs

Libxml2: stack buffer overflow in xmllint interactive shell command handling

OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.