Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

New Red Hat Single Sign-On 7.6.2 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.final) +50 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (1.0-rc-1)

org.keycloak:keycloak-core MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

eu.limetri.ygg:ygg-client (0.12), eu.limetri.ygg:ygg-client-installed (>=0.13, <=0.16) +56 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (1.0.4.final)

org.keycloak:keycloak-core MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - eu.limetri.ygg:ygg-client 0.12 - eu.limetri.ygg:ygg-client-installed =0.13, =1.0.2, =1.0.2, =1.0.2,...

org.keycloak:keycloak-account-api (1.0-rc-2), org.keycloak:keycloak-account-freemarker (1.0-rc-2) +48 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (1.0-rc-2)

org.keycloak:keycloak-core MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0-rc-2 - org.keycloak:keycloak-account-freemarker 1.0-rc-2 -...

org.keycloak:keycloak-adapter-core (3.0.0.cr1), org.keycloak:keycloak-admin-client (3.0.0.cr1) +55 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (3.0.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.0.0.cr1 - org.keycloak:keycloak-admin-client 3.0.0.cr1 -...

de.adorsys.keycloak:keycloak-config-cli (0.1.0-3-2.5.5), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.3.2.final) +70 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.5.5.final)

org.keycloak:keycloak-core MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.keycloak:keycloak-config-cli 0.1.0-3-2.5.5 - io.apiman:apiman-distro-eap7 =1.3.1.final,...

org.keycloak:keycloak-adapter-core (2.5.1.final), org.keycloak:keycloak-admin-client (2.5.1.final) +52 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.5.1.final)

org.keycloak:keycloak-core MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.1.final - org.keycloak:keycloak-admin-client 2.5.1.final -...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

org.keycloak:keycloak-adapter-core (3.1.0.cr1), org.keycloak:keycloak-admin-client (3.1.0.cr1) +56 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (3.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.1.0.cr1 - org.keycloak:keycloak-admin-client 3.1.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.2.0.final), org.keycloak:keycloak-admin-client (2.2.0.final) +52 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.2.0.final)

org.keycloak:keycloak-core MAVEN version 2.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.2.0.final - org.keycloak:keycloak-admin-client 2.2.0.final -...

org.keycloak:keycloak-adapter-core (2.2.0.cr1), org.keycloak:keycloak-admin-client (2.2.0.cr1) +51 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.2.0.cr1 - org.keycloak:keycloak-admin-client 2.2.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.1.0.cr1), org.keycloak:keycloak-admin-client (2.1.0.cr1) +48 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.1.0.cr1 - org.keycloak:keycloak-admin-client 2.1.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.0.0.cr1), org.keycloak:keycloak-admin-client (2.0.0.cr1) +46 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (2.0.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.0.0.cr1 - org.keycloak:keycloak-admin-client 2.0.0.cr1 -...

io.apicurio:apicurio-studio-be-hub-api (0.2.15.final), io.apicurio:apicurio-studio-fe-servlet (0.2.15.final) +66 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.1.0.final)

org.keycloak:keycloak-core MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apicurio:apicurio-studio-be-hub-api 0.2.15.final - io.apicurio:apicurio-studio-fe-servlet...

com.github.bogad:itarone-keycloak-starter (>=2.0.0, <=2.1.2), de.samply:auth-client (4.0.1) +65 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.0.0.final)

org.keycloak:keycloak-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.bogad:itarone-keycloak-starter =2.0.0, =2.1.2 - de.samply:auth-client 4.0.1 -...

org.fintrace:microservice-keycloak-support (>=0.0.4, <=0.0.9), org.keycloak:keycloak-adapter-core (4.0.0.beta3) +64 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.0.0.beta3)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:microservice-keycloak-support =0.0.4, =0.0.9 - org.keycloak:keycloak-adapter-core...

de.cidaas:cidaas-interceptor-spring-security-xml (0.0.1), org.fintrace:microservice-keycloak-support (>=0.0.2, <=0.0.3) +61 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.0.0.beta2)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.cidaas:cidaas-interceptor-spring-security-xml 0.0.1 - org.fintrace:microservice-keycloak-support...

org.fintrace:keycloak-event-receiver-common (0.0.1), org.fintrace:keycloak-event-receiver-http (0.0.1) +59 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (4.0.0.beta1)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:keycloak-event-receiver-common 0.0.1 - org.fintrace:keycloak-event-receiver-http 0.0.1 -...

org.keycloak:keycloak-adapter-core (3.3.0.cr2), org.keycloak:keycloak-admin-client (3.3.0.cr2) +56 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (3.3.0.cr2)

org.keycloak:keycloak-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.cr2 - org.keycloak:keycloak-admin-client 3.3.0.cr2 -...

org.keycloak:keycloak-adapter-core (3.3.0.cr1), org.keycloak:keycloak-admin-client (3.3.0.cr1) +56 more potentially affected by CVE-2023-0091 via org.keycloak:keycloak-core (3.3.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.cr1 - org.keycloak:keycloak-admin-client 3.3.0.cr1 -...