Red Hat Product Errata RHSA-2025:11636 - Security Advisory
Issued:
2025-07-23
Updated:
2025-07-23

RHSA-2025:11636 - Security Advisory

Synopsis

Moderate: Red Hat Single Sign-On 7.6.12 for OpenShift image security update

Type/Severity

Security Advisory: Moderate

Topic

A new image is available for Red Hat Single Sign-On 7.6.12, running on OpenShift Container Platform 3.10 and 3.11, and 4.3.

Description

Red Hat Single Sign-On is an integrated sign-on solution, available as a
Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat
Single Sign-On for OpenShift image provides an authentication server that
you can use to log in centrally, log out, and register. You can also manage
user accounts for web applications, mobile applications, and RESTful web
services.

This erratum releases a new image for Red Hat Single Sign-On 7.6.12 for
use within the OpenShift Container Platform 3.10, OpenShift Container Platform
3.11, and within the OpenShift Container Platform 4.3 cloud computing Platform-as-a-Service (PaaS) for on-premise or private cloud deployments, aligning with the standalone product release. This security update has moderate impact.

Security fixes:

  • org.wildfly.core/wildfly-core-management-client: Wildfly vulnerable to Cross-Site Scripting (XSS) (CVE-2024-10234)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x

Fixes

  • BZ - 2320848 - CVE-2024-10234 wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

ppc64le

rh-sso-7/sso76-openshift-rhel8@sha256:807dab9a35582f65f637efe5ec309c5308460a239891a990fa82474fbc836acd

s390x

rh-sso-7/sso76-openshift-rhel8@sha256:c5a69bbe0b726f1226ba3b6a156770ab5ffc7c53c7cb7441ae69a6b5e3195473

x86_64

rh-sso-7/sso76-openshift-rhel8@sha256:864aad86c111a5fd86fc0021b53f029860331b6d663a9376d3a7ad8b40bedec1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.