RHSA-2023:2713MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 security update

Published
May 10, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (7)

CVE-2022-45787 →CVE-2023-0482 →CVE-2021-0341 →CVE-2022-4492 →CVE-2022-38752 →CVE-2022-41854 →CVE-2022-41881 →

📋 Description

CVE-2021-0341 — okhttp: information disclosure via improperly used cryptographic function CVE-2022-4492 — undertow: Server identity in https connection is not checked by the undertow client CVE-2022-38752 — snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode CVE-2022-41854 — dev-java/snakeyaml: DoS via stack overflow CVE-2022-41881 — codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS CVE-2022-45787 — apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider CVE-2023-0482 — RESTEasy: creation of insecure temp files

🎯 Affected products1

  • Red Hat Single Sign-On 7

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (11)