Skip to content
OpenAdvisories
High ALAS2-2023-2149 1 CVE

Important: ipa security update (Amazon Linux 2)

Published Jul 17, 2023 · Updated Jul 19, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-25719: A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.

Fixed packages 12

ReleasePackageFixed in
Amazon Linux · 2 ipa-client 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-client-common 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-common 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-debuginfo 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-python-compat 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-server 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-server-common 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-server-dns 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 ipa-server-trust-ad 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 python2-ipaclient 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 python2-ipalib 0:4.6.8-5.amzn2.4.2
Amazon Linux · 2 python2-ipaserver 0:4.6.8-5.amzn2.4.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-25719.html