RHSA-2024:1862: Important: Red Hat Single Sign-On 7.6.8 security update on RHEL 9
Important: Red Hat Single Sign-On 7.6.8 security update on RHEL 9
Other sources
Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications.<br>This release of Red Hat Single Sign-On 7.6.8 on RHEL 9 serves as a replacement for Red Hat Single Sign-On 7.6.7, and includes bug fixes, security updates and<br>enhancements which are linked to in the References.<br>Security Fix(es):<br><li> Authorization Bypass (CVE-2023-6544)</li> <li> Log Injection during WebAuthn authentication or registration (CVE-2023-6484)</li> <li> path transversal in redirection validation (CVE-2024-1132)</li> <li> unvalidated cross-origin messages in checkLoginIframe leads to DDoS (CVE-2024-1249)</li> <li> undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol (CVE-2024-1635)</li> For more details about the security issue(s), including the impact, a CVSS<br>score, and other related information, refer to the CVE page(s) listed in the<br>References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1862?
The vulnerability identified as RHSA-2024:1862 is classified as important.
How do I fix RHSA-2024:1862?
To fix RHSA-2024:1862, update Red Hat Single Sign-On to version 18.0.13-1.redhat_00001.1.el9 or later.
Which versions of Red Hat Single Sign-On are affected by RHSA-2024:1862?
Red Hat Single Sign-On versions prior to 18.0.13-1.redhat_00001.1.el9 are affected by RHSA-2024:1862.
What components are impacted by RHSA-2024:1862?
RHSA-2024:1862 impacts the packages rh-sso7-keycloak and rh-sso7-keycloak-server.
What is the nature of the security update in RHSA-2024:1862?
The security update in RHSA-2024:1862 addresses vulnerabilities related to authentication and single sign-on capabilities.