com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +19 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (10.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 -...

com.github.vzakharchenko:keycloak-plugins (1.0.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.0.2) +20 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (8.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.0.2 -...

org.keycloak:keycloak-authz-policy-common (3.4.1.final), org.keycloak:keycloak-authz-policy-drools (3.4.1.final) +13 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.4.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.1.final -...

org.keycloak:keycloak-authz-policy-common (3.3.0.final), org.keycloak:keycloak-authz-policy-drools (3.3.0.final) +13 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.3.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.final -...

org.keycloak:keycloak-authz-policy-common (2.4.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.4.0.cr1) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (2.4.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.4.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (2.4.0.final), org.keycloak:keycloak-authz-policy-drools (2.4.0.final) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (2.4.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.4.0.final -...

org.keycloak:keycloak-authz-policy-common (2.5.0.final), org.keycloak:keycloak-authz-policy-drools (2.5.0.final) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (2.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.final -...

org.keycloak:keycloak-authz-policy-common (2.5.1.final), org.keycloak:keycloak-authz-policy-drools (2.5.1.final) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (2.5.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.1.final -...

org.keycloak:keycloak-authz-policy-common (3.0.0.final), org.keycloak:keycloak-authz-policy-drools (3.0.0.final) +11 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.0.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.final -...

de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20), org.keycloak:keycloak-authz-policy-common (3.1.0.final) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.multibanking:keycloak-custom-secret-provider =1.3.0, =1.20 -...

org.keycloak:keycloak-authz-policy-common (2.5.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.5.0.cr1) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (2.5.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (2.5.4.final), org.keycloak:keycloak-authz-policy-drools (2.5.4.final) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (2.5.4.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.4.final -...

org.keycloak:keycloak-authz-policy-common (2.5.5.final), org.keycloak:keycloak-authz-policy-drools (2.5.5.final) +12 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (2.5.5.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.5.final -...

org.keycloak:keycloak-authz-policy-common (3.0.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.0.0.cr1) +11 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.0.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.1.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.1.0.cr1) +11 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.1.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.1.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.4.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.4.0.cr1) +13 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.4.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.4.2.final), org.keycloak:keycloak-dependencies-server-min (3.4.2.final) +9 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-server-spi-private (3.4.2.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.2.final -...

PT-2022-7613 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fix commit Description: The issue is related to a NULL pointer dereference in the zynq qspi exec mem op function. This occurs because kzalloc is directly used in memset, which could lead to a NULL pointer...

Chinese Hackers Spotted Using New UEFI Firmware Implant in Targeted Attacks

A previously undocumented firmware implant deployed to maintain stealthy persistence as part of a targeted espionage campaign has been linked to the Chinese-speaking Winnti advanced persistent threat group APT41. Kaspersky, which codenamed the rootkit MoonBounce, characterized the malware as the...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 for OpenShift image security and enhancement update

A new image is available for Red Hat Single Sign-On 7.5.1, running on OpenShift Container Platform 3.10 and 3.11, and 4.9. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...