ALT-PU-2026-4903

Высокий

ALT-PU-2026-4903: package keycloak update to version 26.5.6-alt1

Источник

errata.altlinux.org

Дата публикации

23.03.2026

Дата обновления

03.07.2026

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades keycloak to version 26.5.6-alt1.

Устраненные уязвимости22

BDU:2026-01704

Высокий 8.1

Дата публикации: 11.02.2026

Уязвимость компонента JSON Web Token Handler программного средства для управления идентификацией и доступом Keycloak, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS 3.1

Высокий 8.1

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: None

CVSS 2.0

Высокий 8.5

AV:N/AC:L/Au:S/C:C/I:C/A:N

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: Complete
Integrity: Complete
Availability: None

Ссылки

BDU:2026-01704 https://bdu.fstec.ru/vul/2026-01704

Ссылки19

ALT-PU-2026-4903 https://errata.altlinux.org/ALT-PU-2026-4903

GHSA-37gf-gmxv-74wv

https://github.com/advisories/GHSA-37gf-gmxv-74wv

GHSA-63v5-26vq-m4vm

https://github.com/advisories/GHSA-63v5-26vq-m4vm

GHSA-6q37-7866-h27j

https://github.com/advisories/GHSA-6q37-7866-h27j

GHSA-794g-x443-36f7

https://github.com/advisories/GHSA-794g-x443-36f7

GHSA-7vw6-5q2f-7w5r

https://github.com/advisories/GHSA-7vw6-5q2f-7w5r

GHSA-7xf9-4jfc-wgm4

https://github.com/advisories/GHSA-7xf9-4jfc-wgm4

GHSA-8cr3-vpxx-92cx

https://github.com/advisories/GHSA-8cr3-vpxx-92cx

GHSA-fjf4-6f34-w64q

https://github.com/advisories/GHSA-fjf4-6f34-w64q

GHSA-fm6w-rrp3-2x4w

https://github.com/advisories/GHSA-fm6w-rrp3-2x4w

GHSA-gv94-wp4h-vv8p

https://github.com/advisories/GHSA-gv94-wp4h-vv8p

GHSA-hcvw-475w-8g7p

https://github.com/advisories/GHSA-hcvw-475w-8g7p

GHSA-m297-3jv9-m927

https://github.com/advisories/GHSA-m297-3jv9-m927

GHSA-m2w5-7xhv-w6fh

https://github.com/advisories/GHSA-m2w5-7xhv-w6fh

GHSA-q35r-vvhv-vx5h

https://github.com/advisories/GHSA-q35r-vvhv-vx5h

GHSA-r8jr-wg88-fq5c

https://github.com/advisories/GHSA-r8jr-wg88-fq5c

GHSA-x4p7-7chp-64hq

https://github.com/advisories/GHSA-x4p7-7chp-64hq

GHSA-xh32-c9wx-phrp

https://github.com/advisories/GHSA-xh32-c9wx-phrp

GHSA-xv6h-r36f-3gp5

https://github.com/advisories/GHSA-xv6h-r36f-3gp5

Связанные уязвимости

ALT-PU-2026-4792

CVSS3: 7.2

altlinux

8 месяцев назад

ALT-PU-2026-4792: package `keycloak` update to version 26.5.6-alt1

CVE-2025-14082

CVSS3: 2.7

redhat

11 месяцев назад

A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.

CVE-2025-14082

CVSS3: 2.7

nvd

11 месяцев назад

CVE-2025-14082

CVSS3: 2.7

debian

11 месяцев назад

A flaw was found in Keycloak Admin REST (Representational State Transf ...

GHSA-6q37-7866-h27j

CVSS3: 2.7

github

11 месяцев назад

Keycloak Admin REST (Representational State Transfer) API does not properly enforce permissions