Red Hat Security Advisory

RHSA-2022:1463

Red Hat Single Sign-On 7.5.2 security update on RHEL 8

Released 2022-04-20 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7.5 for RHEL 8 rh-sso7-keycloak-15.0.6-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-15.0.6-1.redhat_00001.1.el8sso

Fixes 1 record

TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

HIGH 72

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.99999 Published 2021-12-18 Partial fix · 2.17.0, 2.12.3 +5 CWE-20