Skip to content
OpenAdvisories
Medium · 6.5 CVE-2017-2582 EUVD-2018-0568GHSA-c77r-6f64-478q

keycloak-core discloses system properties

Published Jul 26, 2018 · Updated Aug 5, 2024 · Assigned by redhat

Vendor: Red Hat Product: keycloak Package: org.keycloak:keycloak-core Ecosystem: Maven

Description

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.

Affected products

VendorProductAffectedFixed
Red Hat keycloak 2.5.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat JBoss EAP 7 eap7 +1 1-13.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-FastInfoset +1 1.2.13-10.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-activemq-artemis +16 2.6.3-3.redhat_00014.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-aesh-extensions 1.6.0-2.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-aesh-readline 1.10.0-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-agroal +3 1.3.0-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-antlr 2.7.7-54.redhat_7.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-commons-beanutils 1.9.3-5.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-commons-cli 1.3.1-3.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-commons-codec 1.10.0-6.redhat_5.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-commons-collections 3.2.2-9.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-commons-io 2.5.0-4.redhat_3.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-commons-lang 3.6.0-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-commons-lang2 2.6.0-1.redhat_7.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-cxf +3 3.2.5-3.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-apache-mime4j 0.6.0-4.redhat_7.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-artemis-native +1 1.1.0-13.redhat_4.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-artemis-wildfly-integration 1.0.2-4.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-atinject 1.0.0-3.redhat_6.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-avro 1.7.6-7.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-azure-storage 6.1.0-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-bouncycastle +3 1.56.0-3.redhat_2.2.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-byte-buddy 1.8.17-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-caffeine 2.6.2-3.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-cal10n 0.8.1-6.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-codehaus-jackson +4 1.9.13-8.redhat_4.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-cryptacular 1.2.0-4.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-cxf-xjc-dv +5 3.2.2-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-dom4j 1.6.1-24.redhat_7.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-ecj 4.6.1-3.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-eclipse-jgit 5.0.2.201807311906-2.r_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-elytron-web +1 1.2.3-2.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-glassfish-concurrent 1.0.0-4.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-glassfish-el +1 3.0.1-3.b08_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-glassfish-jaf 1.1.1-22.redhat_5.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-glassfish-javamail 1.6.1-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-glassfish-jsf 2.3.5-2.SP2_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-glassfish-json 1.1.2-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-gnu-getopt 1.0.13-6.redhat_5.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-gson 2.8.2-1.redhat_5.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-guava +1 25.0.0-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-h2database 1.4.193-6.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-hal-console 3.0.10-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-hibernate +4 5.3.7-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-hibernate-commons-annotations 5.0.4-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-hibernate-search +5 5.10.3-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-hibernate-validator +1 5.2.5-2.Final_redhat_2.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-hornetq +3 2.4.7-5.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-httpcomponents-asyncclient 4.1.3-2.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-httpcomponents-client 4.5.2-3.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-httpcomponents-core 4.4.4-4.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-infinispan +8 9.3.3-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-ironjacamar +8 1.4.11-2.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jackson-core +9 2.9.5-2.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jaegertracing-jaeger-client-java +2 0.30.6-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jandex 2.0.5-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jansi 1.16.0-6.redhat_4.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jasypt 1.9.2-2.redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-java-classmate 1.3.4-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-javaee-jpa-spec 2.2.0-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-javaee-security-api +2 1.0.0-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-javaewah 1.1.6-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-javapackages-tools +1 3.4.1-5.15.6.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-javassist 3.23.1-1.GA_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jaxbintros 1.0.2-20.GA_redhat_8.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jaxen 1.1.6-14.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jberet +1 1.3.1-1.Final_redhat_00001.2.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-aesh 1.7.0-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-classfilewriter 1.2.3-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-common-beans 2.0.0-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-dmr 1.5.0-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-ec2-eap +1 7.0.8-1.GA_redhat_1.ep7.el6 RHSA-2017:2811
Red Hat JBoss EAP 7 eap7-jboss-ejb-api_3.2_spec +5 1.0.1-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-ejb-client 4.0.12-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-ejb3-ext-api 2.2.0-5.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-el-api_3.0_spec 1.0.12-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-genericjms +1 2.0.1-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-iiop-client +1 1.0.1-3.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-invocation 1.5.1-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-jaspi-api_1.1_spec +3 1.0.2-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-jaxrs-api_2.1_spec 1.0.1-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-jaxws-api_2.3_spec +2 1.0.0-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-jms-api_2.0_spec 1.0.1-2.Final_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-jboss-jsf-api_2.3_spec 2.3.5-1.SP1_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-jsp-api_2.3_spec 1.0.3-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-logging 3.3.2-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-logmanager 2.0.7-2.Final_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-jboss-metadata +5 10.0.2-2.Final_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-jboss-modules 1.8.6-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-msc 1.4.5-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-openjdk-orb 8.1.2-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-remote-naming 2.0.5-1.Final_redhat_1.1.ep7.el6 RHSA-2017:2809, RHSA-2017:2808
Red Hat JBoss EAP 7 eap7-jboss-remoting 4.0.24-1.Final_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-jboss-remoting-jmx 3.0.0-9.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-saaj-api_1.3_spec 1.0.6-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-seam-int 7.0.0-6.GA_redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-security-negotiation 3.0.4-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-security-xacml 2.0.8-17.Final_redhat_8.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-server-migration +22 1.3.0-5.Final_redhat_00003.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-stdio 1.0.2-3.GA_redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-threads 2.3.2-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-transaction-spi 7.6.0-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-vfs 3.2.14-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-websocket-api_1.1_spec 1.1.3-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-weld-3.0-api +2 3.0.0-7.SP4_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jboss-xnio-base 3.6.5-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jbossws-api 1.1.2-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jbossws-common 3.2.2-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jbossws-common-tools 1.3.2-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jbossws-cxf 5.2.4-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jbossws-spi 3.2.3-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jcip-annotations 1.0.0-5.redhat_8.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jdom 1.1.3-16.redhat_3.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jettison 1.3.8-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jgroups 4.0.15-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jgroups-azure 1.2.0-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jgroups-kubernetes 1.0.6-1.Final_redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-joda-time 2.9.7-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jsch 0.1.54-7.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-json-patch 1.3.0-3.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jsonb-spec +1 1.0.0-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jsoup 1.8.3-4.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jul-to-slf4j-stub 1.0.1-7.Final_redhat_3.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-jzlib 1.1.1-7.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-log4j-jboss-logmanager 1.1.4-2.Final_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-lucene-core +7 5.5.5-3.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-microprofile-config +1 1.3.0-2.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-microprofile-health 1.0.0-1.redhat_83.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-microprofile-opentracing +1 1.1.0-2.redhat_00002.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-microprofile-rest-client +1 1.0.1-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-mod_cluster +1 1.4.0-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-mustache-java +1 0.9.4-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-narayana +10 5.9.0-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-neethi 3.1.1-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-netty +1 4.1.25-2.Final_redhat_00003.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-netty-xnio-transport 0.1.6-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-objectweb-asm 6.2.1-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-okhttp 3.9.0-3.redhat_3.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-okio 1.13.0-2.redhat_3.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-opensaml +13 3.3.0-1.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-opentracing-contrib-java-concurrent 0.1.0-2.redhat_00002.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-opentracing-contrib-java-jaxrs 0.1.7-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-opentracing-contrib-java-tracerresolver 0.1.5-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-opentracing-contrib-java-web-servlet-filter 0.1.0-1.redhat_00027.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-opentracing-java +3 0.31.0-1.redhat_00008.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-picketbox +1 5.0.3-4.Final_redhat_3.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-picketbox-commons 1.0.0-4.final_redhat_5.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-picketlink-api +9 2.5.5-9.SP8_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-reactive-streams 1.0.2-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-reactivex-rxjava 2.1.16-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-resteasy +19 3.6.1-3.SP2_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-shibboleth-java-support 7.1.1-4.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-slf4j +3 1.7.22-4.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-slf4j-jboss-logmanager 1.0.3-3.GA_redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-smallrye-config 1.3.4-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-smallrye-health 1.0.2-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-smallrye-opentracing 1.1.1-1.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-snakeyaml 1.18.0-1.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-stax2-api 3.1.4-6.redhat_2.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-staxmapper 1.3.0-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-sun-istack-commons +2 3.0.5-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-sun-saaj-1.3-impl 1.3.16-17.SP1_redhat_6.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-sun-ws-metadata-2.0-api 1.0.0-7.MR1_redhat_8.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-taglibs-standard-impl +3 1.2.6-2.RC1_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-thrift 0.11.0-2.redhat_00006.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-txw2 +7 2.3.1-6.redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-undertow 1.3.31-1.Final_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-undertow-jastow +2 2.0.6-2.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-undertow-js +1 1.0.2-2.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-vdx +2 1.1.6-2.redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-velocity +1 2.0.0-3.redhat_1.2.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-weld-cdi-2.0-api 2.0.0-3.SP1_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-weld-ejb +6 3.0.5-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-wildfly +1 7.0.8-4.GA_redhat_1.1.ep7.el6 RHSA-2019:0137, RHSA-2019:0136, RHSA-2017:2809
Red Hat JBoss EAP 7 eap7-wildfly-client-config 1.0.1-2.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-wildfly-discovery +2 1.1.1-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-wildfly-elytron 1.6.1-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-wildfly-elytron-tool 1.4.0-1.Final_redhat_00001.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-wildfly-http-client 1.0.12-1.Final_redhat_1.1.el6eap RHSA-2019:0137, RHSA-2019:0136
Red Hat JBoss EAP 7 eap7-wildfly-javadocs 7.0.8-1.GA_redhat_1.1.ep7.el6 RHSA-2017:2809, RHSA-2017:2808
Red Hat JBoss EAP 6 codehaus-jackson +4 1.9.9-14.redhat_7.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 guava-libraries 13.0.1-5.redhat_3.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 hibernate4-validator 4.3.4-1.Final_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 hornetq 2.3.25-24.SP22_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 ironjacamar-eap6 +9 1.0.42-2.Final_redhat_2.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 jboss-as-ee +62 7.5.18-1.Final_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 jboss-ec2-eap +1 7.5.18-1.Final_redhat_1.ep6.el6 RHSA-2017:3219
Red Hat JBoss EAP 6 jboss-ejb-client 1.0.41-1.Final_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 jboss-logmanager 1.5.8-1.Final_redhat_1.1.ep6.el5 RHSA-2017:3218, RHSA-2017:3217, RHSA-2017:3216
Red Hat JBoss EAP 6 jboss-modules 1.3.11-1.Final_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 jboss-remoting3 3.3.12-1.Final_redhat_1.1.ep6.el5 RHSA-2017:3218, RHSA-2017:3217, RHSA-2017:3216
Red Hat JBoss EAP 6 jboss-vfs2 3.2.13-1.Final_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 jboss-xnio-base 3.0.17-1.GA_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 jbossweb 7.5.26-1.Final_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 picketlink-bindings 2.5.4-20.SP16_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 picketlink-federation 2.5.4-18.SP16_redhat_1.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741
Red Hat JBoss EAP 6 resteasy 2.3.22-1.Final_redhat_1.1.ep6.el5 RHSA-2017:3218, RHSA-2017:3217, RHSA-2017:3216
Red Hat JBoss EAP 6 xerces-j2-eap6 2.9.1-19.redhat_8.1.ep6.el5 RHSA-2018:2743, RHSA-2018:2742, RHSA-2018:2741

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.keycloak:keycloak-core < 2.5.1 2.5.1 GHSA-c77r-6f64-478q

Advisories 12

References