RHSA-2023:2710MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 for OpenShift image security update

Published
May 10, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (7)

CVE-2021-0341 →CVE-2022-4492 →CVE-2022-38752 →CVE-2022-41854 →CVE-2022-41881 →CVE-2022-45787 →CVE-2023-0482 →

📋 Description

CVE-2021-0341 — okhttp: information disclosure via improperly used cryptographic function CVE-2022-4492 — undertow: Server identity in https connection is not checked by the undertow client CVE-2022-38752 — snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode CVE-2022-41854 — dev-java/snakeyaml: DoS via stack overflow CVE-2022-41881 — codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS CVE-2022-45787 — apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider CVE-2023-0482 — RESTEasy: creation of insecure temp files

🎯 Affected products4

  • Middleware Containers for OpenShift
  • rh-sso-7/sso76-openshift-rhel8@sha256:9079e1080d36270fbd3529a221a014859042ebcc627243f015cbbdd3bdc04275_amd64 as a component of Middleware Containers for OpenShift
  • rh-sso-7/sso76-openshift-rhel8@sha256:c3e0e8203d2a7dd9e3bc729b3fd28b15558b7e6d25c3fb538687be54f0ec5568_ppc64le as a component of Middleware Containers for OpenShift
  • rh-sso-7/sso76-openshift-rhel8@sha256:e7d2be6b039deff86bf9fa7c0285583f3769d4f39be9471ba9906fe8e2fb00e5_s390x as a component of Middleware Containers for OpenShift

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (13)