[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2019:2137-01 -- Redhat keycloak-httpd-client-install

ID: oval:org.secpod.oval:def:503245Date: (C)2019-09-17   (M)2023-06-16
Class: PATCHFamily: unix




The keycloak-httpd-client-install packages provide various libraries and tools that can automate and simplify the configuration of Apache httpd authentication modules when registering as a Red Hat Single Sign-On federated Identity Provider client. The following packages have been upgraded to a later upstream version: keycloak-httpd-client-install . Security Fix: * keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py * keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Platform:
Red Hat Enterprise Linux 7
Product:
keycloak-httpd-client-install
Reference:
RHSA-2019:2137-01
CVE-2017-15111
CVE-2017-15112
CVE    2
CVE-2017-15112
CVE-2017-15111
CPE    2
cpe:/o:redhat:enterprise_linux:7
cpe:/a:keycloak-httpd-client-install_project:keycloak-httpd-client-install

© SecPod Technologies