Summary
[4.4.0-14.0.1.el7_3.1.1]
- Blank out header-logo.png product-name.png
Replace login-screen-logo.png [20362818]
[4.4.0-14.1.1]
- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services
by abusing password policy
- ipa-kdb: search for password policies globally
- Renamed patches 1011 and 1012 to 0146 and 0145, as they were merged upstream
[4.4.0-14.1]
- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services
by abusing password policy
- password policy: Add explicit default password policy for hosts and
services
- Resolves: #1395311 CVE-2016-9575 ipa: Insufficient permission check in
certprofile-mod
- certprofile-mod: correctly authorise config update
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ipa-admintools | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-client | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-client-common | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-common | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-python-compat | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-server | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-server-common | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-server-dns | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | ipa-server-trust-ad | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | python2-ipaclient | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | python2-ipalib | 0:4.4.0-14.0.1.el7_3.1.1 |
| Oracle Linux · 7 | python2-ipaserver | 0:4.4.0-14.0.1.el7_3.1.1 |
Vulnerabilities 2
-
Unscored —
FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows…
-
Unscored —
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modif…