Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 security update on RHEL 8

Fixed packages 2

Vulnerabilities 7

• Critical 9.8
  CVE-2022-4492

  Undertow client not checking server identity presented by server certificate in https connections

  The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Feb 23, 2023
• High 7.5
  CVE-2021-0341

  Square OkHttp can accept the wrong certificate

  In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction…

  com.squareup.okhttp3:okhttp Android Maven
  Feb 10, 2021
• Medium 6.5
  CVE-2022-38752

  DoS in SnakeYAML

  Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

  SnakeYaml SnakeYaml management-api-for-apache-cassandra-5.0 management-api-for-apache-cassandra-5.0-compat Debian Wolfi Maven
  Sep 5, 2022
• Medium 5.8
  CVE-2022-41854

  Stack Overflow in Snakeyaml

  Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may suppor…

  SnakeYaml SnakeYaml management-api-for-apache-cassandra-5.0 management-api-for-apache-cassandra-5.0-compat Debian Wolfi Maven
  Nov 11, 2022
• Medium 5.5
  CVE-2022-45787

  Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider

  Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j…

  Apache Software Foundation Apache James Mime4J org.apache.james:apache-mime4j-storage Maven
  Jan 6, 2023
• Medium 5.5
  CVE-2023-0482 Public exploit

  Insecure Temporary File in RESTEasy

  In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

  resteasy resteasy3.0 resteasy3.0 org.jboss.resteasy:resteasy-core Debian Ubuntu Maven
  Feb 17, 2023
• Medium 5.3
  CVE-2022-41881

  HAProxyMessageDecoder Stack Exhaustion DoS

  Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…

  netty netty netty netty Debian Ubuntu Maven
  Dec 12, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2129710
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2153260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2153379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2154086
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2158916
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2166004
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2706.json
• report
  https://access.redhat.com/security/cve/CVE-2021-0341
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-0341
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-0341
• article
  https://source.android.com/security/bulletin/2021-02-01
• report
  https://access.redhat.com/security/cve/CVE-2022-4492
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4492
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4492
• report
  https://access.redhat.com/security/cve/CVE-2022-38752
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-38752
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-38752
• report
  https://access.redhat.com/security/cve/CVE-2022-41854
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41854
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41854
• article
  https://bitbucket.org/snakeyaml/snakeyaml/issues/543/stackoverflow-oss-fuzz-50355
• article
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
• report
  https://access.redhat.com/security/cve/CVE-2022-41881
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41881
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41881
• report
  https://access.redhat.com/security/cve/CVE-2022-45787
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-45787
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-45787
• report
  https://access.redhat.com/security/cve/CVE-2023-0482
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0482
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0482