Red Hat Product Errata RHSA-2026:76134 - Security Advisory
Issued:
2026-10-05
Updated:
2026-10-05

RHSA-2026:76134 - Security Advisory

Synopsis

Important: Red Hat Single Sign-On 7.6.13 for OpenShift image security update

Type/Severity

Security Advisory: Important

Topic

A new image is available for Red Hat Single Sign-On 7.6.13, running on OpenShift
Container Platform 3.10 and 3.11, and 4.3.

Description

Red Hat Single Sign-On is an integrated sign-on solution, available as a
Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat
Single Sign-On for OpenShift image provides an authentication server that
you can use to log in centrally, log out, and register. You can also manage
user accounts for web applications, mobile applications, and RESTful web
services.

This erratum releases a new image for Red Hat Single Sign-On 7.6.13 for
use within the OpenShift Container Platform 3.10, OpenShift Container Platform
3.11, and within the OpenShift Container Platform 4.3 cloud computing
Platform-as-a-Service (PaaS) for on-premise or private cloud deployments,
aligning with the standalone product release. This security update has moderate
impact.

Security fixes:

  • undertow-core: Undertow MadeYouReset HTTP/2 DDoS Vulnerability (CVE-2025-9784)
  • Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF (CVE-2025-12543)
  • Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF (CVE-2025-12543)
  • Information disclosure and data deletion via second-order SQL injection (CVE-2026-0603)
  • GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)
  • PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)
  • unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)
  • High integrity impact due to improper DNS domain name constraint enforcement (CVE-2026-42579)
  • HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers (CVE-2026-42581)
  • HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578)
  • Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)
  • Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)
  • IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
  • Denial of Service via malformed HAProxy message (CVE-2026-44893)
  • Denial of Service due to resource leak (CVE-2026-48043)
  • Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)
  • Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
  • Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
  • Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
  • Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
  • Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
  • Denial of Service via deeply nested JSON processing (CVE-2026-50193)
  • Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)
  • Missing authentication on EAP's IIOP NameService leads to MITM or DoS (CVE-2026-15563)
  • Session fixation in OIDC login flow that can lead to account takeover (CVE-2026-7507)
  • Denial of Service via specially crafted SAML input (CVE-2026-7307)
  • Denial of Service due to excessive SAMLRequest decompression (CVE-2026-2575)
  • Denial of Service via excessive processing of OpenID Connect scope parameters (CVE-2026-4634)
  • Unauthorized access via improper validation of encrypted SAML assertions (CVE-2026-2092)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x

Fixes

(none)

ppc64le

rh-sso-7/sso76-openshift-rhel8@sha256:3c851f2398ba67beb5b9ca55d984010262b35bf9d659f279829abd33da01a7ac

s390x

rh-sso-7/sso76-openshift-rhel8@sha256:d466be5920b7e34edbca61e8e565dce1e8139b22481fa1d1b8f98d79acc946dc

x86_64

rh-sso-7/sso76-openshift-rhel8@sha256:c5afebef31c670ec67dab77ebaef767778c89c88be00f108cc435773fc42a993

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.