Skip to content
OpenAdvisories
High RHBA-2022:5452 2 CVEs

Red Hat Bug Fix Advisory: Red Hat Single Sign-On 7.6.0 update on RHEL 7

Published Sep 16, 2024 · Updated Sep 11, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el7 rh-sso7 0:1-4.el7sso
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el7 rh-sso7-javapackages-tools 0:3.4.1-5.15.3.jbcs.el7
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el7 rh-sso7-keycloak 0:18.0.0-2.redhat_00001.1.el7sso
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el7 rh-sso7-keycloak-server 0:18.0.0-2.redhat_00001.1.el7sso
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el7 rh-sso7-python-javapackages 0:3.4.1-5.15.3.jbcs.el7
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7.6::el7 rh-sso7-runtime 0:1-4.el7sso

Vulnerabilities 2

  • High 7.3
    CVE-2022-0839

    Improper Restriction of XML External Entity Reference in liquibase/liquibase

    Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0.

    liquibase liquibase/liquibase org.liquibase:liquibase-core Maven
  • Medium 4.3
    CVE-2021-3856

    Keycloak has Files or Directories Accessible to External Parties

    ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of ra…

    org.keycloak:keycloak-core Maven

References

  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_5452.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3856
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2010164
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3856
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3856
  • report
    https://access.redhat.com/security/cve/CVE-2022-0839
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081484
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0839
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0839
  • article
    https://huntr.dev/bounties/f1ae5779-b406-4594-a8a3-d089c68d6e70