ALT-PU-2026-8781: package keycloak update to version 26.6.3-alt1
Описание
This update upgrades keycloak to version 26.6.3-alt1.
Устраненные уязвимости18
Ссылки17
GHSA-22rm-wp4x-v5cx
https://github.com/advisories/GHSA-22rm-wp4x-v5cxGHSA-33j3-g875-37rp
https://github.com/advisories/GHSA-33j3-g875-37rpGHSA-4q93-v92x-p89f
https://github.com/advisories/GHSA-4q93-v92x-p89fGHSA-5v8v-xvjv-57x7
https://github.com/advisories/GHSA-5v8v-xvjv-57x7GHSA-6g26-7cx5-mrrg
https://github.com/advisories/GHSA-6g26-7cx5-mrrgGHSA-83c4-ffjp-mxp9
https://github.com/advisories/GHSA-83c4-ffjp-mxp9GHSA-f6r7-6w34-x2gp
https://github.com/advisories/GHSA-f6r7-6w34-x2gpGHSA-fqjh-8322-vgrv
https://github.com/advisories/GHSA-fqjh-8322-vgrvGHSA-g8vr-x4qh-25qg
https://github.com/advisories/GHSA-g8vr-x4qh-25qgGHSA-gv94-wp4h-vv8p
https://github.com/advisories/GHSA-gv94-wp4h-vv8pGHSA-hm32-hfmw-rhvg
https://github.com/advisories/GHSA-hm32-hfmw-rhvgGHSA-m6qj-3mpp-57v8
https://github.com/advisories/GHSA-m6qj-3mpp-57v8GHSA-r5fr-rjxr-66jc
https://github.com/advisories/GHSA-r5fr-rjxr-66jcGHSA-rr5q-3xwr-f323
https://github.com/advisories/GHSA-rr5q-3xwr-f323GHSA-v5g5-wwmp-jppw
https://github.com/advisories/GHSA-v5g5-wwmp-jppwGHSA-xxqh-mfjm-7mv9
https://github.com/advisories/GHSA-xxqh-mfjm-7mv9Связанные уязвимости
ALT-PU-2026-8920: package `keycloak` update to version 26.6.3-alt1
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.
A flaw was found in Keycloak. The Keycloak Authorization header parser ...
Keycloak has Incorrect Behavior Order: Authorization Before Parsing and Canonicalization