Summary
[4.4.0-14.0.1.el7_3.6]
- Blank out header-logo.png product-name.png
Replace login-screen-logo.png [20362818]
[4.4.0-14.6]
- Resolves: #1416488 replication race condition prevents IPA to install
- wait_for_entry: use only DN as parameter
- Wait until HTTPS principal entry is replicated to replica
- Use proper logging for error messages
[4.4.0-14.5]
- Resolves: #1410760 ipa-ca-install fails on replica when IPA Master is
installed without CA
- Set up DS TLS on replica in CA-less topology
- Resolves: #1413137 CVE-2017-2590 ipa: Insufficient permission check for
ca-del, ca-disable and ca-enable commands
- ca: correctly authorise ca-del, ca-enable and ca-disable
- Resolves: #1416481 IPA replica install fails with dirsrv errors.
- Do not configure PKI ajp redirection to use '::1'
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ipa-admintools | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-client | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-client-common | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-common | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-python-compat | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-server | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-server-common | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-server-dns | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | ipa-server-trust-ad | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | python2-ipaclient | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | python2-ipalib | 0:4.4.0-14.0.1.el7_3.6 |
| Oracle Linux · 7 | python2-ipaserver | 0:4.4.0-14.0.1.el7_3.6 |
Vulnerabilities 1
-
High 8.1
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check th…