RHBA-2025:22465 - Bug Fix Advisory

Topic

The JBoss Web Server (JWS) Operator for OpenShift has been updated to provide fixes for an expat CVE.

Description

This erratum covers updates to the JWS Operator for OpenShift to fix the following expat CVE:

• expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64

Fixes

• BZ - 2395108 - CVE-2025-59375 expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

CVEs

• CVE-2025-5318
• CVE-2025-6395
• CVE-2025-32988
• CVE-2025-32990
• CVE-2025-53905
• CVE-2025-53906
• CVE-2025-59375

References

• https://access.redhat.com/errata/RHSA-2025:21776