BSD Portskeycloak -- Multiple security fixes
· CVE-2021-9666, CVE-2021-10039, CVE-2021-10270, CVE-2021-10451, CVE-2021-10492 · VuXML entry
Keycloak reports: This update includes 5 security fixes: CVE-2024-10451: Sensitive Data Exposure in Keycloak Build Process CVE-2024-10270: Potential Denial of Service CVE-2024-10492: Keycloak path trasversal CVE-2024-9666: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability CVE-2024-10039: Bypassing mTLS validation
Affected versions
- keycloak < 26.0.6
By system
0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | net/keycloak | 26.2.3 | fixed | |
| OpenBSD | security/keycloak | 26.7.3 | out of range, by version | |
| NetBSD | wip/py-keycloak | 3.0.0 | not listed | |
| FreeBSD | net/keycloak | 26.8.1 | fixed | (593 days after) |