RHSA-2024:1861: Important: Red Hat Single Sign-On 7.6.8 security update on RHEL 8

Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications.<br>This release of Red Hat Single Sign-On 7.6.8 on RHEL 8 serves as a replacement for Red Hat Single Sign-On 7.6.7, and includes bug fixes, security updates and<br>enhancements which are linked to in the References.<br>Security Fix(es):<br><li> path transversal in redirection validation (CVE-2024-1132)</li> <li> org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS (CVE-2024-1249)</li> <li> undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol (CVE-2024-1635)</li> <li> Authorization Bypass (CVE-2023-6544)</li> <li> Log Injection during WebAuthn authentication or registration (CVE-2023-6484)</li> For more details about the security issue(s), including the impact, a CVSS<br>score, and other related information, refer to the CVE page(s) listed in the<br>References section.

— Red Hat