ELSA-2019-2137

ELSA-2019-2137 - keycloak-httpd-client-install security, bug fix, and enhancement update

Type:	SECURITY
Severity:	LOW
Release Date:	2019-08-13

Description

[0.8-1]
- Resolves: rhbz#1673716 - Rebase k-h-c-i to version 0.8
- The rebase also includes fixes for:
- rhbz#1533190 - CVE-2017-15111 keycloak-httpd-client-install: unsafe
/tmp log file in --log-file option in keycloak_cli.py
- rhbz#1533202 - CVE-2017-15112 keycloak-httpd-client-install: unsafe
use of -p/--admin-password on command line

Related CVEs

CVE-2017-15111

CVE-2017-15112

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	keycloak-httpd-client-install-0.8-1.el7.src.rpm	e1ffe168748fdae0753ec99b2ee9d6c4	-
	keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	e4d62dff4bece52cc5075bebe486678f	-
	python2-keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	22e17165ba8c19fa68aade3e5c3a4730	-
Oracle Linux 7 (x86_64)	keycloak-httpd-client-install-0.8-1.el7.src.rpm	e1ffe168748fdae0753ec99b2ee9d6c4	-
	keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	e4d62dff4bece52cc5075bebe486678f	-
	python2-keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	22e17165ba8c19fa68aade3e5c3a4730	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team