Red Hat Security Advisory

RHSA-2024:1686

Red Hat Single Sign-On 7.6.7 for OpenShift image security update

Released 2024-04-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Middleware Containers for OpenShift rh-sso-7/sso7-rhel8-operator-bundle, rh-sso-7/sso76-openshift-rhel8

TI-2024-01491 CVE-2024-1597 · GHSA-24rp-q3w6-vc56

HIGH 82

pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0481 Published 2024-02-19 Partial fix · 42.7.2, 42.6.1 +4 CWE-89

TI-2020-17152 CVE-2020-28241 · GHSA-8h2q-prr9-7wh9

LOW 33

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02159 Published 2020-11-06 Partial fix CWE-125

TI-2023-05640 CVE-2023-6135 · GHSA-jxv6-m6pm-cqh2

LOW 21

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva".

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00714 Published 2023-12-19 Partial fix · 121 CWE-203