{"id":"RHSA-2017:0873","summary":"Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 7","modified":"2026-03-18T10:01:54Z","published":"2024-09-13T14:39:58Z","upstream":["CVE-2016-8629","CVE-2016-9589","CVE-2017-2585"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:0873"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#moderate"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.1/html/release_notes/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388988"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404782"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412376"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHSSO-426"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0873.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2016-8629"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2016-8629"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8629"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2016-9589"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2016-9589"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9589"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-2585"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-2585"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2585"}],"affected":[{"package":{"name":"rh-sso7","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-2.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-freemarker","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-freemarker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.23-1.redhat_2.2.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-javapackages-tools","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-javapackages-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.3.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-keycloak","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-keycloak"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-2.Final_redhat_1.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-keycloak-server","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-keycloak-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-2.Final_redhat_1.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-libunix-dbus-java","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-libunix-dbus-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-2.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-libunix-dbus-java-debuginfo","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-libunix-dbus-java-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-2.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-libunix-dbus-java-devel","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-libunix-dbus-java-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-2.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-liquibase","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-liquibase"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.redhat_2.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-liquibase-core","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-liquibase-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.redhat_2.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-python-javapackages","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-python-javapackages"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-5.15.3.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-runtime","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-runtime"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-2.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-twitter4j","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-twitter4j"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.4-1.redhat_3.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-twitter4j-core","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-twitter4j-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.4-1.redhat_3.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-zxing","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-zxing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.redhat_4.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-zxing-core","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-zxing-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.redhat_4.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}},{"package":{"name":"rh-sso7-zxing-javase","ecosystem":"Red Hat:red_hat_single_sign_on:7::el7","purl":"pkg:rpm/redhat/rh-sso7-zxing-javase"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.redhat_4.1.jbcs.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2017:0873.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}