Summary
Bug Fix(es):
* IPA upgrade fails for latest ipa package when adtrust is installed (BZ#1773516)
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | custodia | 0.6.0-3.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux · 8 | custodia | 0.6.0-3.module_el8.5.0+2603+92118e57 |
| AlmaLinux · 8 | python3-custodia | 0.6.0-3.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux · 8 | python3-custodia | 0.6.0-3.module_el8.5.0+2603+92118e57 |
| AlmaLinux · 8 | python3-jwcrypto | 0.5.0-1.module_el8.5.0+2603+92118e57 |
| AlmaLinux · 8 | python3-jwcrypto | 0.5.0-1.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux · 8 | python3-jwcrypto | 0.5.0-1.module_el8.6.0+2737+7e73ea90 |
| AlmaLinux · 8 | python3-pyusb | 1.0.0-9.module_el8.5.0+2603+92118e57 |
| AlmaLinux · 8 | python3-pyusb | 1.0.0-9.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux · 8 | python3-pyusb | 1.0.0-9.module_el8.6.0+2737+7e73ea90 |
| AlmaLinux · 8 | python3-qrcode | 5.1-12.module_el8.5.0+2603+92118e57 |
| AlmaLinux · 8 | python3-qrcode | 5.1-12.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux · 8 | python3-qrcode | 5.1-12.module_el8.6.0+2737+7e73ea90 |
| AlmaLinux · 8 | python3-qrcode-core | 5.1-12.module_el8.6.0+2737+7e73ea90 |
| AlmaLinux · 8 | python3-qrcode-core | 5.1-12.module_el8.5.0+2603+92118e57 |
| AlmaLinux · 8 | python3-qrcode-core | 5.1-12.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux · 8 | python3-yubico | 1.3.2-9.module_el8.6.0+2737+7e73ea90 |
| AlmaLinux · 8 | python3-yubico | 1.3.2-9.module_el8.6.0+2881+2f24dc92 |
| AlmaLinux · 8 | python3-yubico | 1.3.2-9.module_el8.5.0+2603+92118e57 |
Vulnerabilities 2
-
High 8.8
Code injection in FreeIPA
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unaut…
-
Medium 5.7
FreeIPA logs passwords embedded in commands in calls using batch
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA mast…