This advisory covers Red Hat OpenShift Container Platform 4.15.49, which fixes two security vulnerabilities: CVE-2025-22868 in golang.org/x/oauth2/jws causing unexpected memory consumption during token parsing, and CVE-2025-30204 in golang-jwt/jwt allowing excessive memory allocation during header parsing. These vulnerabilities relate to inefficient memory handling in JWT processing libraries used within the platform. The update is distributed as container images and RPM packages, with instructions provided for upgrading clusters. The advisory rates the security impact as Important (high severity) and recommends users upgrade to the updated packages and images available through official release channels.

The vulnerabilities can cause excessive or unexpected memory consumption during parsing of tokens and headers in JWT libraries, potentially leading to resource exhaustion or degraded performance of the OpenShift Container Platform. No known exploits in the wild have been reported. The impact is primarily on platform stability and resource management rather than direct code execution or data breach.

A fix is available in Red Hat OpenShift Container Platform 4.15.49. Users should upgrade to this version using the OpenShift CLI or web console as per Red Hat's official upgrade instructions. The vendor advisory explicitly recommends applying these updated packages and container images when available in the appropriate release channel. No additional mitigation steps are indicated beyond applying the official update.