Apache HTTP Server Privilege Escalation Vulnerability

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect

Keycloak's device authorization grant does not correctly validate the device code and client ID

A vulnerability was found in cri-o

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function

An unconstrained memory consumption vulnerability was discovered in Keycloak

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied…

A flaw was found in undertow

A flaw was found in undertow

A compliance problem was found in the Red Hat OpenShift Container Platform

A flaw was found in the redirect_uri validation logic in Keycloak

A flaw was found in the offline_access scope in Keycloak

A vulnerability was found in Podman, Buildah, and CRI-O

Keycloak: potential bypass of brute force protection

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP)

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service

A misconfiguration flaw was found in Keycloak

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token