RHBA-2025:13993 - Bug Fix Advisory

Topic

Update the JWS Operator for OpenShift to fix sqlite and libxml2 CVEs

Description

This erratum covers updates to the JWS Operator for OpenShift to fix the following sqlite and libxml2 CVEs:

• sqlite: Integer Truncation in SQLite (CVE-2025-6965)
• libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64

Fixes

• BZ - 2383146 - CVE-2025-8058 glibc: Double free in glibc

CVEs

• CVE-2024-34397
• CVE-2024-52533
• CVE-2025-4373
• CVE-2025-6965
• CVE-2025-7425
• CVE-2025-8058

References

(none)