Summary
[4.6.8-5.0.1]
- Blank out header-logo.png product-name.png
- Replace login-screen-logo.png [Orabug: 20362818]
[4.6.8-5.el7_9.4]
- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ipa-client | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | ipa-client-common | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | ipa-common | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | ipa-python-compat | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | ipa-server | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | ipa-server-common | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | ipa-server-dns | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | ipa-server-trust-ad | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | python2-ipaclient | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | python2-ipalib | 0:4.6.8-5.0.1.el7_9.4 |
| Oracle Linux · 7 | python2-ipaserver | 0:4.6.8-5.0.1.el7_9.4 |
Vulnerabilities 1
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025