RHBA-2025:3822 - Bug Fix Advisory

Topic

The JBoss Web Server (JWS) Operator for OpenShift has been updated to provide a fix for libxml2 CVE-2024-56171 and CVE-2025-24928.

Description

This erratum covers updates to the JWS Operator for OpenShift to fix libxml2 CVE-2024-56171 and CVE-2025-24928.

Solution

You can download the RHEL-8-based Middleware Containers container image that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).

Dockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.

Affected Products

• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64

Fixes

• BZ - 2342796 - CVE-2025-24528 krb5: overflow when calculating ulog block size

CVEs

• CVE-2019-12900
• CVE-2024-35195
• CVE-2024-56171
• CVE-2025-24528
• CVE-2025-24928

References

(none)