Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update

A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 7

New Red Hat Single Sign-On 7.6.7 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 8

New Red Hat Single Sign-On 7.6.7 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 for OpenShift image enhancement update

A new image is available for Red Hat Single Sign-On 7.6.7, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +96 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (15.0.0)

org.keycloak:keycloak-core MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 - com.github.vzakharchenko:cisco-radius-plugin...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=2.2.0.final, <=2.2.3.final), io.apiman:apiman-manager-api-security (>=2.2.0.final, <=2.2.3.final) +72 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (15.1.1)

org.keycloak:keycloak-core MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =2.2.0.final, =2.2.0.final, =5.3.0.alpha2,...

org.keycloak:keycloak-adapter-core (8.0.0), org.keycloak:keycloak-admin-client (8.0.0) +57 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (8.0.0)

org.keycloak:keycloak-core MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 8.0.0 - org.keycloak:keycloak-admin-client 8.0.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +118 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (12.0.3)

org.keycloak:keycloak-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 - com.github.vzakharchenko:cisco-radius-plugin 1.3...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +137 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (13.0.0)

org.keycloak:keycloak-core MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 - com.github.vzakharchenko:cisco-radius-plugin 1.3...

cn.sparrowmini:sparrow-keycloak-adapter (>=0.0.1, <=0.0.2), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.10.9-21.1.1, <=0.11.4-21.1.1) +92 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (21.1.1)

org.keycloak:keycloak-core MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - cn.sparrowmini:sparrow-keycloak-adapter =0.0.1, =0.10.9-21.1.1, =2.0.10, =2.0.10, =2.0.10, =2.0.10,...

com.github.dasniko:testcontainers-keycloak (>=2.6.0, <=3.0.0), io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19) +72 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (22.0.0)

org.keycloak:keycloak-core MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.dasniko:testcontainers-keycloak =2.6.0, =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...

com.abavilla:fpi-framework-core (1.8.11), com.abavilla:fpi-framework-pom (1.8.11) +71 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (22.0.5)

org.keycloak:keycloak-core MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-framework-core 1.8.11 - com.abavilla:fpi-framework-pom 1.8.11 - com.abavilla:fpi-login-ap...

com.github.dasniko:testcontainers-keycloak (2.3.0), net.micedre.keycloak:keycloak-mail-whitelisting (1.5) +58 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (19.0.0)

org.keycloak:keycloak-core MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.dasniko:testcontainers-keycloak 2.3.0 - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 -...

com.abavilla:fpi-bot-api (>=1.2.0, <=1.5.0), com.abavilla:fpi-bot-api-core (>=1.2.0, <=1.3.1) +138 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (19.0.3)

org.keycloak:keycloak-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-bot-api =1.2.0, =1.2.0, =1.2.0, =1.3.2, =1.5.0, =1.5.0, =1.2.1, =1.2.1, =1.2.1, =1.3.2,...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +88 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (12.0.0)

org.keycloak:keycloak-core MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9,...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.1, <=1.3.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.1, <=1.3.2) +93 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (12.0.1)

org.keycloak:keycloak-core MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1,...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

org.keycloak:keycloak-adapter-core (3.0.0.cr1), org.keycloak:keycloak-admin-client (3.0.0.cr1) +55 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (3.0.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.0.0.cr1 - org.keycloak:keycloak-admin-client 3.0.0.cr1 -...

de.adorsys.keycloak:keycloak-config-cli (0.1.0-3-2.5.5), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.3.2.final) +70 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (2.5.5.final)

org.keycloak:keycloak-core MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.keycloak:keycloak-config-cli 0.1.0-3-2.5.5 - io.apiman:apiman-distro-eap7 =1.3.1.final,...

io.apicurio:apicurio-studio-be-hub-api (0.2.15.final), io.apicurio:apicurio-studio-fe-servlet (0.2.15.final) +66 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (4.1.0.final)

org.keycloak:keycloak-core MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apicurio:apicurio-studio-be-hub-api 0.2.15.final - io.apicurio:apicurio-studio-fe-servlet...