Bug 57787

Summary:	Необходимо запускать сервис от непривелегированного пользователя
Product:	Sisyphus	Reporter:	Alexey Shabalin <shaba>
Component:	keycloak	Assignee:	Andrey Cherepanov <cas>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	critical
Priority:	P5	CC:	cas
Version:	unstable
Hardware:	all
OS:	Linux

Description Alexey Shabalin 2026-02-06 19:05:02 MSK

Запуск сервиса от root опасен.

Comment 1 Repository Robot 2026-02-23 10:35:30 MSK

keycloak-26.5.4-alt1 -> sisyphus:

Sun Feb 22 2026 Andrey Cherepanov <cas@altlinux> 26.5.4-alt1
- New version (fixes: CVE-2026-1190, CVE-2026-0707, CVE-2025-5416,
  CVE-2026-2575, CVE-2026-2733).
- Run service under non-privileged user (ALT #57787).
- Used certificates from /etc/keycloak/ssl.