RHBA-2025:17565 - Bug Fix Advisory

Topic

This erratum covers updates to the current Red Hat JBoss Web Server 6.1 for OpenShift images to fix cups CVE-2025-58060.

Description

Red Hat xPaaS provides images for many of the Red Hat Middleware products that are available for use within the OpenShift Container Platform cloud computing Platform-as-a-Service (PaaS) for on-premise or private cloud deployments.

The current JBoss Web Server 6.1 for OpenShift images have been updated to fix the following cups CVE:

• cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060)

Solution

To update to the latest JBoss Web Server 6.1.2 for OpenShift image on UBI8, perform the following steps to pull in the content:

1. On your master host(s), ensure that you are logged in to the command line interface as a cluster administrator or user who has project administrator access to the global "openshift" project:

$ oc login -u system:admin

2. Depending on the OpenJDK version, run one of the following commands to update the core JBoss Web Server 6.1 tomcat 10 OpenShift image stream in the "openshift" project:

• For OpenJDK 17:

To update the core JBoss Web Server 6.1 tomcat 10 with OpenJDK 17 OpenShift image, run the following command:

$ oc -n openshift import-image jboss-webserver61-openjdk17-tomcat10-openshift-ubi8:6.1.2

• For OpenJDK 21:

To update the core JBoss Web Server 6.1 tomcat 10 with OpenJDK 21 OpenShift image, run the following command:

$ oc -n openshift import-image jboss-webserver61-openjdk21-tomcat10-openshift-ubi8:6.1.2

Affected Products

• Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x

Fixes

• BZ - 2392595 - CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling

CVEs

• CVE-2025-58060

References

• https://access.redhat.com/errata/RHSA-2025:15702