ALT-PU-2026-4792: package keycloak update to version 26.5.6-alt1
Описание
This update upgrades keycloak to version 26.5.6-alt1.
Устраненные уязвимости8
Ссылки8
GHSA-6q37-7866-h27j
https://github.com/advisories/GHSA-6q37-7866-h27jGHSA-7vw6-5q2f-7w5r
https://github.com/advisories/GHSA-7vw6-5q2f-7w5rGHSA-7xf9-4jfc-wgm4
https://github.com/advisories/GHSA-7xf9-4jfc-wgm4GHSA-m2w5-7xhv-w6fh
https://github.com/advisories/GHSA-m2w5-7xhv-w6fhGHSA-q35r-vvhv-vx5h
https://github.com/advisories/GHSA-q35r-vvhv-vx5hGHSA-r8jr-wg88-fq5c
https://github.com/advisories/GHSA-r8jr-wg88-fq5cGHSA-xh32-c9wx-phrp
https://github.com/advisories/GHSA-xh32-c9wx-phrpСвязанные уязвимости
ALT-PU-2026-4903: package `keycloak` update to version 26.5.6-alt1
A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
A flaw was found in Keycloak Admin REST (Representational State Transf ...
Keycloak Admin REST (Representational State Transfer) API does not properly enforce permissions