RHSA-2020:0947: Important: Red Hat Single Sign-On 7.3.7 security update on RHEL 8
Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications.<br>This release of Red Hat Single Sign-On 7.3.7 on RHEL 8 serves as a replacement for Red Hat Single Sign-On 7.3.6, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.<br>Security Fix(es):<br><li> keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP (CVE-2020-1744)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0947?
RHSA-2020:0947 has been classified with a medium severity level.
How do I fix RHSA-2020:0947?
To resolve RHSA-2020:0947, you should update Red Hat Single Sign-On to version 4.8.18-1.Final_redhat_00001.1.el8.
Which products are affected by RHSA-2020:0947?
RHSA-2020:0947 affects the rh-sso7-keycloak and rh-sso7-keycloak-server packages.
Is RHSA-2020:0947 related to security vulnerabilities?
Yes, RHSA-2020:0947 addresses security vulnerabilities in Red Hat Single Sign-On 7.3.7.
What versions are impacted by RHSA-2020:0947?
Versions of rh-sso7-keycloak and rh-sso7-keycloak-server prior to 4.8.18-1.Final_redhat_00001.1.el8 are impacted by RHSA-2020:0947.