Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-6486

Высокий

ALT-PU-2025-6486: package keycloak update to version 26.2.4-alt1

Источник
errata.altlinux.org
Дата публикации
20.05.2025
Дата обновления
05.02.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades keycloak to version 26.2.4-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 5.4
redhat
больше 1 года назад

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

CVSS3: 5.4
nvd
больше 1 года назад

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

CVSS3: 5.4
debian
больше 1 года назад

A flaw was found in Keycloak. The org.keycloak.authorization package m ...

CVSS3: 8.2
redhat
больше 1 года назад

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.

CVSS3: 8.2
nvd
больше 1 года назад

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.