FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

keycloak -- Multiple security fixes

Affected packages
		keycloak	<	26.0.6

Details

VuXML ID	7d7a28cd-7f5a-450a-852f-c49aaab3fa7e
Discovery	2024-11-22
Entry	2024-11-25

Keycloak reports:

This update includes 5 security fixes:

CVE-2024-10451: Sensitive Data Exposure in Keycloak Build Process

CVE-2024-10270: Potential Denial of Service

CVE-2024-10492: Keycloak path trasversal

CVE-2024-9666: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability

CVE-2024-10039: Bypassing mTLS validation

[source]

References

CVE Name	CVE-2021-10039
CVE Name	CVE-2021-10270
CVE Name	CVE-2021-10451
CVE Name	CVE-2021-10492
CVE Name	CVE-2021-9666