RHSA-2024:6497: Moderate: Red Hat Single Sign-On 7.6.10 for OpenShift image enhancement update

Red Hat Single Sign-On is an integrated sign-on solution, available as a<br>Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat<br>Single Sign-On for OpenShift image provides an authentication server that<br>you can use to log in centrally, log out, and register. You can also manage<br>user accounts for web applications, mobile applications, and RESTful web<br>services.<br>This erratum releases a new image for Red Hat Single Sign-On 7.6.10 for<br>use within the OpenShift Container Platform 3.10, OpenShift Container Platform<br>3.11, and within the OpenShift Container Platform 4.3 cloud computing Platform-as-a-Service (PaaS) for<br>on-premise or private cloud deployments, aligning with the standalone product release.<br>Security fixes:<br><li> potential bypass of brute force protection (CVE-2024-4629)</li> <li> session fixation in elytron saml adapters (CVE-2024-7341)</li> <li> Leak of configured LDAP bind credentials through the Keycloak admin console (CVE-2024-5967)</li>