Critical Photon OS Security Update - PHSA-2026-4.0-0976

Updates of 'ruby', 'ImageMagick' packages of Photon OS have been released...

org.keycloak:keycloak-quarkus-server-app (12.0.3), org.keycloak:keycloak-quarkus-server-deployment (12.0.3) potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (12.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.3 -...

org.keycloak:keycloak-guides (24.0.3), org.keycloak:keycloak-guides-maven-plugin (24.0.3) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (24.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.3 - org.keycloak:keycloak-guides-maven-plugin 24.0.3...

org.keycloak:keycloak-guides (18.0.0), org.keycloak:keycloak-guides-maven-plugin (18.0.0) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (18.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.0 - org.keycloak:keycloak-guides-maven-plugin 18.0.0...

org.keycloak:keycloak-guides (25.0.0), org.keycloak:keycloak-guides-maven-plugin (25.0.0) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (25.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.0 - org.keycloak:keycloak-guides-maven-plugin 25.0.0...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-guides (25.0.6) +4 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (25.0.6)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0, =4.0.5-25.0 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.2.5) +19 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (>=26.0.0, <=26.2.5)

org.keycloak:keycloak-quarkus-server MAVEN version =26.0.0, =4.1.0-26.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.0.0, =26.2.5 and more Source cves: CVE-2026-0976htt...

org.keycloak:keycloak-guides (20.0.5), org.keycloak:keycloak-guides-maven-plugin (20.0.5) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (20.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.5 - org.keycloak:keycloak-guides-maven-plugin 20.0.5...

org.keycloak:keycloak-guides (21.1.2), org.keycloak:keycloak-guides-maven-plugin (21.1.2) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (21.1.2)

org.keycloak:keycloak-quarkus-server MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 21.1.2 - org.keycloak:keycloak-guides-maven-plugin 21.1.2...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (23.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin 23.0.3...

org.keycloak:keycloak-guides (24.0.0), org.keycloak:keycloak-guides-maven-plugin (24.0.0) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (24.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.0 - org.keycloak:keycloak-guides-maven-plugin 24.0.0...

org.keycloak:keycloak-guides (22.0.5), org.keycloak:keycloak-guides-maven-plugin (22.0.5) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (22.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.5 - org.keycloak:keycloak-guides-maven-plugin 22.0.5...

org.keycloak:keycloak-guides (19.0.0), org.keycloak:keycloak-guides-maven-plugin (19.0.0) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (19.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.0 - org.keycloak:keycloak-guides-maven-plugin 19.0.0...

org.keycloak:keycloak-guides (19.0.1), org.keycloak:keycloak-guides-maven-plugin (19.0.1) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (19.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.1 - org.keycloak:keycloak-guides-maven-plugin 19.0.1...

org.keycloak:keycloak-guides (21.0.0), org.keycloak:keycloak-guides-maven-plugin (21.0.0) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (21.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 21.0.0 - org.keycloak:keycloak-guides-maven-plugin 21.0.0...

org.keycloak:keycloak-quarkus-server-app (14.0.0), org.keycloak:keycloak-quarkus-server-deployment (14.0.0) potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (14.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 14.0.0 -...

org.keycloak:keycloak-guides (16.1.0), org.keycloak:keycloak-guides-maven-plugin (16.1.0) +3 more potentially affected by CVE-2026-0976 via org.keycloak:keycloak-quarkus-server (16.1.0)

org.keycloak:keycloak-quarkus-server MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 16.1.0 - org.keycloak:keycloak-guides-maven-plugin 16.1.0...

ECHO-0976-1948-FDF3 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

CVE-2020-0976

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0977...

CVE-2013-0976

IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted graphics image...