exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Red Hat Security Advisory 2022-1713-01

Red Hat Security Advisory 2022-1713-01
Posted May 5, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-1713-01 - The rh-sso-7/sso75-openshift-rhel8 container image has been updated for RHEL-8 based Middleware Containers. Issues addressed include a privilege escalation vulnerability.

tags | advisory
systems | linux, redhat
advisories | CVE-2018-25032, CVE-2022-1154, CVE-2022-1245, CVE-2022-1271, CVE-2022-21426, CVE-2022-21434, CVE-2022-21443, CVE-2022-21476, CVE-2022-21496
SHA-256 | 5e68f770626e4f6d387ddf43f4ea9975e4956978d0e4fee9895e84e69c5886b1

Red Hat Security Advisory 2022-1713-01

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================
Red Hat Security Advisory

Synopsis: Moderate: security update for rh-sso-7/sso75-openshift-rhel8 container image
Advisory ID: RHSA-2022:1713-01
Product: Red Hat OpenShift Enterprise
Advisory URL: https://access.redhat.com/errata/RHSA-2022:1713
Issue date: 2022-05-04
CVE Names: CVE-2018-25032 CVE-2022-1154 CVE-2022-1245
CVE-2022-1271 CVE-2022-21426 CVE-2022-21434
CVE-2022-21443 CVE-2022-21476 CVE-2022-21496
====================================================================
1. Summary:

Security updated rh-sso-7/sso75-openshift-rhel8 container image is now
available for RHEL-8 based Middleware Containers.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Description:

The rh-sso-7/sso75-openshift-rhel8 container image has been updated for
RHEL-8 based Middleware Containers to include the following security
issues.

Security Fix(es):

* keycloak: Privilege escalation vulnerability on Token Exchange
(CVE-2022-1245)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Users of rh-sso-7/sso75-openshift-rhel8 container images are advised to
upgrade to these updated images, which contain backported patches to
correct these security issues, fix these bugs and add these enhancements.
Users of these images are also encouraged to rebuild all container images
that depend on these images.

You can find images updated by this advisory in Red Hat Container Catalog
(see References).

3. Solution:

The RHEL-8 based Middleware Containers container image provided by this
update can be downloaded from the Red Hat Container Registry at
registry.access.redhat.com. Installation instructions for your platform are
available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to this new image
specifically, or to the latest image generally.

4. Bugs fixed (https://bugzilla.redhat.com/):

2071036 - CVE-2022-1245 keycloak: Privilege escalation vulnerability on Token Exchange

5. References:

https://access.redhat.com/security/cve/CVE-2018-25032
https://access.redhat.com/security/cve/CVE-2022-1154
https://access.redhat.com/security/cve/CVE-2022-1245
https://access.redhat.com/security/cve/CVE-2022-1271
https://access.redhat.com/security/cve/CVE-2022-21426
https://access.redhat.com/security/cve/CVE-2022-21434
https://access.redhat.com/security/cve/CVE-2022-21443
https://access.redhat.com/security/cve/CVE-2022-21476
https://access.redhat.com/security/cve/CVE-2022-21496
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/security/cve/cve-2022-1245
https://access.redhat.com/containers/?tab=images#/registry.access.redhat.com/rh-sso-7/sso75-openshift-rhel8
https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.5/html/release_notes/index

6. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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psbs
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Login or Register to add favorites

File Archive:

July 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    52 Files
  • 2
    Jul 2nd
    0 Files
  • 3
    Jul 3rd
    0 Files
  • 4
    Jul 4th
    11 Files
  • 5
    Jul 5th
    8 Files
  • 6
    Jul 6th
    8 Files
  • 7
    Jul 7th
    0 Files
  • 8
    Jul 8th
    0 Files
  • 9
    Jul 9th
    0 Files
  • 10
    Jul 10th
    0 Files
  • 11
    Jul 11th
    0 Files
  • 12
    Jul 12th
    0 Files
  • 13
    Jul 13th
    0 Files
  • 14
    Jul 14th
    0 Files
  • 15
    Jul 15th
    0 Files
  • 16
    Jul 16th
    0 Files
  • 17
    Jul 17th
    0 Files
  • 18
    Jul 18th
    0 Files
  • 19
    Jul 19th
    0 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close