Important: Red Hat Security Advisory: Red Hat build of Quarkus 1.7.5 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Low: Red Hat Security Advisory: Red Hat support for Spring Boot 2.2.10 security update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.2 security update

A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.2 security update on RHEL 7

New Red Hat Single Sign-On 7.4.2 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.2 security update on RHEL 6

New Red Hat Single Sign-On 7.4.2 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 7 : Red Hat Single Sign-On 7.4.2 security update on RHEL 7 (Important) (RHSA-2020:3496)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3496 advisory. Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), de.retest:recheck (>=1.2.0-beta.1, <=1.4.0) +83 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (6.0.1)

org.keycloak:keycloak-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =1.2.0-beta.1, =1.3.0-beta.1, =0.0.7, =0.0.7, =0.0.6,...

com.mjamsek.auth:kee-auth (1.0.0), de.retest:recheck (>=1.6.0-beta.1, <=1.7.0) +105 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (7.0.1)

org.keycloak:keycloak-core MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.mjamsek.auth:kee-auth 1.0.0 - de.retest:recheck =1.6.0-beta.1, =1.6.0-beta.1, =1.6.0-beta.1,...

com.kurzdigital:keycloak-admin-wrapper (>=0.9.11, <=0.10.3), com.pleosoft:pleosoft-spring-boot-starter (1.0.5-release) +105 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (4.8.3.final)

org.keycloak:keycloak-core MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.kurzdigital:keycloak-admin-wrapper =0.9.11, =1.1.0, =1.2.2, =1.2.2, =7.1.0.m5, =7.1.0.m5,...

com.github.vzakharchenko:keycloak-plugins (>=0.1, <=1.0.1), com.github.vzakharchenko:mikrotik-radius-plugin (>=0.1, <=1.0.1) +93 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (8.0.1)

org.keycloak:keycloak-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins =0.1, =0.1, =0.1, =0.1, =1.8.0-beta.1, =1.8.0-beta.1,...

org.keycloak.example.demo:product-portal-fuse-example (1.1.1.final), org.keycloak:keycloak-account-api (1.1.1.final) +66 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (1.1.1.final)

org.keycloak:keycloak-core MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak.example.demo:product-portal-fuse-example 1.1.1.final - org.keycloak:keycloak-account-api...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

org.keycloak:keycloak-adapter-core (2.5.1.final), org.keycloak:keycloak-admin-client (2.5.1.final) +52 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (2.5.1.final)

org.keycloak:keycloak-core MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.1.final - org.keycloak:keycloak-admin-client 2.5.1.final -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.1), org.keycloak:keycloak-adapter-core (2.5.4.final) +54 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (2.5.4.final)

org.keycloak:keycloak-core MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.1 - org.keycloak:keycloak-adapter-core 2.5.4.fin...

org.keycloak:keycloak-adapter-core (3.1.0.cr1), org.keycloak:keycloak-admin-client (3.1.0.cr1) +56 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (3.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.1.0.cr1 - org.keycloak:keycloak-admin-client 3.1.0.cr1 -...

org.jenkins-ci.plugins:keycloak (2.0.3), org.keycloak:keycloak-adapter-core (3.2.0.final) +58 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (3.2.0.final)

org.keycloak:keycloak-core MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jenkins-ci.plugins:keycloak 2.0.3 - org.keycloak:keycloak-adapter-core 3.2.0.final -...

org.keycloak:keycloak-adapter-core (3.0.0.cr1), org.keycloak:keycloak-admin-client (3.0.0.cr1) +55 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (3.0.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.0.0.cr1 - org.keycloak:keycloak-admin-client 3.0.0.cr1 -...

io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (>=1.2.0, <=1.8.0), org.activiti.cloud.audit:activiti-cloud-starter-audit (>=7.0.0.rc2, <=7.1.0.m4) +78 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (4.6.0.final)

org.keycloak:keycloak-core MAVEN version 4.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak =1.2.0, =7.0.0.rc2, =7.0.0.rc2,...

org.kathra:kathra-appmanager-interface (>=1.0.0, <=1.1.0), org.kathra:kathra-appmanager-swagger (>=1.0.0, <=1.1.0) +96 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (4.2.1.final)

org.keycloak:keycloak-core MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.kathra:kathra-appmanager-interface =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0...

io.github.johnjcool:keycloak-cas-services (4.4.0.final), io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (1.1.0) +65 more potentially affected by CVE-2020-1728 via org.keycloak:keycloak-core (4.4.0.final)

org.keycloak:keycloak-core MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...