Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

New Red Hat Single Sign-On 7.6.2 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

com.c4-soft.springaddons:spring-addons-keycloak (>=5.4.0, <=5.4.2), com.markstickel.keycloak:keycloak-kafka-publisher-event-listener-provider (1.0.0) +74 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (19.0.2)

org.keycloak:keycloak-core MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-addons-keycloak =5.4.0, =0.8.0, =0.8.0, =0.1.49, =1.0.0, =1.0.0, =6.3.22,...

org.keycloak:keycloak-account-api (1.2.0.beta1), org.keycloak:keycloak-account-freemarker (1.2.0.beta1) +80 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (1.2.0.beta1)

org.keycloak:keycloak-core MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.2.0.beta1 - org.keycloak:keycloak-account-freemarker 1.2.0.beta1 ...

com.jalalkiswani:smart-cloud-web (>=3.0.0, <=4.0.8), com.jalalkiswani:smart-cloud-web-security (>=4.0.1, <=4.0.8) +79 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (5.0.0)

org.keycloak:keycloak-core MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.jalalkiswani:smart-cloud-web =3.0.0, =4.0.1, =4.0.1, =1.1.0, =0.0.4, =0.0.4, =5.1.0, =5.1.2 -...

org.keycloak:keycloak-adapter-core (3.2.0.cr1), org.keycloak:keycloak-admin-client (3.2.0.cr1) +56 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (3.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.2.0.cr1 - org.keycloak:keycloak-admin-client 3.2.0.cr1 -...

org.fintrace:microservice-keycloak-support (>=0.0.4, <=0.0.9), org.keycloak:keycloak-adapter-core (4.0.0.beta3) +64 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.0.0.beta3)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:microservice-keycloak-support =0.0.4, =0.0.9 - org.keycloak:keycloak-adapter-core...

org.keycloak:keycloak-adapter-core (2.0.0.cr1), org.keycloak:keycloak-admin-client (2.0.0.cr1) +46 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.0.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.0.0.cr1 - org.keycloak:keycloak-admin-client 2.0.0.cr1 -...

cc.jstr:keycloak-authkit (>=1.0.0, <=1.0.1), com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.5.1) +84 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (16.0.0)

org.keycloak:keycloak-core MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - cc.jstr:keycloak-authkit =1.0.0, =1.0.1 - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.5.1 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.7.0, <=0.7.1), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.2.final, <=1.2.3.final) +51 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (1.9.0.final)

org.keycloak:keycloak-core MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.7.0, =1.2.2.final, =1.2.2.final, =1.2.2.final,...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.1, <=1.3.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.1, <=1.3.2) +93 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (12.0.1)

org.keycloak:keycloak-core MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1,...

org.jboss.errai:errai-security-demo (>=3.1.0.cr1, <=3.1.0.final), org.jboss.errai:errai-security-keycloak (>=3.1.0.cr1, <=3.1.0.final) +41 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (1.0-beta-2)

org.keycloak:keycloak-core MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.errai:errai-security-demo =3.1.0.cr1, =3.1.0.cr1, =3.1.0.final -...

io.github.project-openubl:xbuilder-server-war (>=1.2.1.final, <=1.2.2.final), io.github.project-openubl:xbuilder-server-x (>=1.2.1.final, <=1.2.2.final) +61 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (11.0.1)

org.keycloak:keycloak-core MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.project-openubl:xbuilder-server-war =1.2.1.final, =1.2.1.final, =1.8.0.cr1, =1.8.0.cr1,...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

org.keycloak:keycloak-adapter-core (3.0.0.cr1), org.keycloak:keycloak-admin-client (3.0.0.cr1) +55 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (3.0.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.0.0.cr1 - org.keycloak:keycloak-admin-client 3.0.0.cr1 -...

org.jenkins-ci.plugins:keycloak (2.0.3), org.keycloak:keycloak-adapter-core (3.2.0.final) +58 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (3.2.0.final)

org.keycloak:keycloak-core MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jenkins-ci.plugins:keycloak 2.0.3 - org.keycloak:keycloak-adapter-core 3.2.0.final -...

de.adorsys.keycloak:keycloak-config-cli (0.1.0-3-2.5.5), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.3.2.final) +70 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.5.5.final)

org.keycloak:keycloak-core MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.keycloak:keycloak-config-cli 0.1.0-3-2.5.5 - io.apiman:apiman-distro-eap7 =1.3.1.final,...

com.c4-soft.springaddons:spring-security-test-keycloack-addons (1.2.0), com.github.vzakharchenko:keycloak-plugins (1.0.2) +64 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (8.0.2)

org.keycloak:keycloak-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-security-test-keycloack-addons 1.2.0 -...

com.github.bogad:itarone-keycloak-starter (>=2.0.0, <=2.1.2), de.samply:auth-client (4.0.1) +65 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.0.0.final)

org.keycloak:keycloak-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.bogad:itarone-keycloak-starter =2.0.0, =2.1.2 - de.samply:auth-client 4.0.1 -...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-adapter-core (4.2.0.final) +64 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.2.0.final)

org.keycloak:keycloak-core MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

ca.bc.gov.tno:dal-db (0.0.8-alpha), com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.4.12) +102 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (13.0.1)

org.keycloak:keycloak-core MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - ca.bc.gov.tno:dal-db 0.0.8-alpha - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.4.12 -...