title: Red Hat Security Advisory: Red Hat Single Sign-On 7.3.7 security update
description: thrift: Endless loop when feed with specific input data thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source EAP: Vault system property security attribute value is revealed on CLI 'reload' command wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use jackson-databind: lacks certain net.sf.ehcache blocking netty: HTTP request smuggling netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling
cpes: cpe:/a:redhat:jboss_single_sign_on:7.3