Summary
bind-dyndb-ldap
custodia
ipa
[4.9.12-11.0.1]
- Resolves: 2242828 Invalid CSRF protection (CVE-2023-5455)
ipa-healthcheck
opendnssec
python-jwcrypto
python-kdcproxy
[0.4-5]
- Always buffer TCP data in __handle_recv()
- Resolves: #1747144
[0.4-4]
- Correct addrs sorting to be by TCP/UDP
- Resolves: #1732898
python-qrcode
python-yubico
pyusb
slapi-nis
softhsm
Fixed packages 30
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bind-dyndb-ldap | 0:11.6-4.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | custodia | 0:0.6.0-3.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | ipa-client | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-client-common | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-client-epn | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-client-samba | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-common | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-healthcheck | 0:0.12-3.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | ipa-healthcheck-core | 0:0.12-3.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | ipa-python-compat | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-selinux | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-server | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-server-common | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-server-dns | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | ipa-server-trust-ad | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | opendnssec | 0:2.1.7-1.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-custodia | 0:0.6.0-3.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-ipaclient | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | python3-ipalib | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | python3-ipaserver | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | python3-ipatests | 0:4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | python3-jwcrypto | 0:0.5.0-1.1.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-kdcproxy | 0:0.4-5.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | python3-pyusb | 0:1.0.0-9.1.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-qrcode | 0:5.1-12.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-qrcode-core | 0:5.1-12.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-yubico | 0:1.3.2-9.1.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | slapi-nis | 0:0.60.0-4.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | softhsm | 0:2.6.0-5.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | softhsm-devel | 0:2.6.0-5.module+el8.9.0+90094+20819f5a |
Vulnerabilities 2
-
Medium 6.6CVE-2020-17049 EPSS 14%
Kerberos KDC Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured…
-
Medium 6.5
Ipa: invalid csrf protection
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confident…