RHSA-2025:11640 - Security Advisory

Topic

New Red Hat Single Sign-On 7.6.12 packages are now available for Red Hat Enterprise Linux 9.

Description

Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications.

This release of Red Hat Single Sign-On 7.6.12 on RHEL 9 serves as a replacement for Red Hat Single Sign-On 7.6.11, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. This security update has moderate impact.

Security fixes:

• org.wildfly.core/wildfly-core-management-client: Wildfly vulnerable to Cross-Site Scripting (XSS) (CVE-2024-10234)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Single Sign-On 7.6 for RHEL 9 x86_64

Fixes

• BZ - 2320848 - CVE-2024-10234 wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

CVEs

• CVE-2024-10234

References

• https://access.redhat.com/security/updates/classification/#moderate