RHEL 7 : Red Hat Single Sign-On 7.6.6 security update on RHEL 7 (Important) (RHSA-2023:7854)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7854 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

RHEL 8 : Red Hat Single Sign-On 7.6.6 security update on RHEL 8 (Important) (RHSA-2023:7856)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7856 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

RHEL 9 : Red Hat Single Sign-On 7.6.6 security update on RHEL 9 (Important) (RHSA-2023:7855)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7855 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 for OpenShift image enhancement and security update

A new image is available for Red Hat Single Sign-On 7.6.6, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 8

New Red Hat Single Sign-On 7.6.6 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 9

New Red Hat Single Sign-On 7.6.6 packages are now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11), dk.grinn.keycloak:keycloak-migrate-spi (>=0.0.6, <=1.0.11) +3 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (6.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource =0.0.6, =0.0.6, =1.0.11 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.7), com.github.vzakharchenko:cisco-radius-plugin (1.3.7) +15 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (13.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.7 -...

org.keycloak:keycloak-dependencies-server-all (1.0-rc-2), org.keycloak:keycloak-server (1.0-rc-2) potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (1.0-rc-2)

org.keycloak:keycloak-model-jpa MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0-rc-2 - org.keycloak:keycloak-server 1.0-rc-2...

io.github.johnjcool:keycloak-cas-services (4.5.0.final) potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (4.5.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final Source cves: CVE-2023-6563 Source...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +17 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (13.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.0, <=1.4.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.4.0, <=1.4.2) +18 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (17.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final) potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (4.3.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final Source cves:...

com.github.vzakharchenko:keycloak-plugins (1.2.3), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.3) +8 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (9.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.3 - com.github.vzakharchenko:mikrotik-radius-plugin...

org.keycloak:keycloak-dependencies-server-all (1.0.2.final), org.keycloak:keycloak-server (1.0.2.final) potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (1.0.2.final)

org.keycloak:keycloak-model-jpa MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0.2.final - org.keycloak:keycloak-server...

org.keycloak:keycloak-dependencies-server-all (1.8.0.alpha1) potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (1.8.0.alpha1)

org.keycloak:keycloak-model-jpa MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.8.0.alpha1 Source cves: CVE-2023-6563 Sour...

org.keycloak:keycloak-dependencies-server-all (1.8.0.cr1) potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (1.8.0.cr1)

org.keycloak:keycloak-model-jpa MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.8.0.cr1 Source cves: CVE-2023-6563 Source...

org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2), org.keycloak:keycloak-server-feature-pack (3.3.0.cr2) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.3.0.cr2)

org.keycloak:keycloak-model-jpa MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.cr2 -...

org.keycloak:keycloak-dependencies-server-all (3.2.0.final), org.keycloak:keycloak-server-feature-pack (3.2.0.final) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.2.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.0.final -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +17 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (15.1.0)

org.keycloak:keycloak-model-jpa MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...