Skip to content
OpenAdvisories
Medium ELSA-2015-0728 2 CVEs

Moderate: ipa and slapi-nis security and bug fix update (Oracle Linux 7)

Published Mar 26, 2015 · Updated Mar 26, 2015

Summary

ipa
[4.1.0-18.0.1.el7_1.3]
- Replace login-screen-logo.png [20362818]
- Drop subscription-manager requires for OL7
- Drop redhat-access-plugin-ipa requires for OL7
- Blank out header-logo.png product-name.png

[4.1.0-18.3]
- [ipa-python] ipalib.errors.LDAPError: failed to decode certificate:
(SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)

[4.1.0-18.2]
- IPA extdom plugin fails when encountering large groups (#1193759)
- CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
(#1202997)

[4.1.0-18.1]
- 'an internal error has occurred' during ipa host-del --updatedns (#1198431)
- Renamed patch 1013 to 0114, as it was merged upstream
- Fax number not displayed for user-show when kinit'ed as normal user.
(#1198430)
- Replication agreement with replica not disabled when ipa-restore done without
IPA installed (#1199060)
- Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)

slapi-nis
[0.54-3]
- Fix CVE-2015-0283
- Resolves: #1202995

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 ipa-admintools 0:4.1.0-18.0.1.el7_1.3
Oracle Linux · 7 ipa-client 0:4.1.0-18.0.1.el7_1.3
Oracle Linux · 7 ipa-python 0:4.1.0-18.0.1.el7_1.3
Oracle Linux · 7 ipa-server 0:4.1.0-18.0.1.el7_1.3
Oracle Linux · 7 ipa-server-trust-ad 0:4.1.0-18.0.1.el7_1.3
Oracle Linux · 7 slapi-nis 0:0.54-3.el7_1

Vulnerabilities 2

  • Unscored —

    The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows rem…

  • Unscored —

    The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when …