Summary
bind-dyndb-ldap
custodia
ipa
[4.9.13-9.0.1]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
[9.4.13-9]
- dcerpc: invalidate forest trust intfo cache when filtering out realm domains
Resolves: RHEL-28559
- Backport latests test fixes in python3-tests
ipatests: add xfail for autoprivate group test with override
ipatests: remove xfail thanks to sssd 2.9.4
ipatests: adapt for new automembership fixup behavior
ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases
test_xmlrpc: adopt to automember plugin message changes in 389-ds
Resolves: RHEL-29908
ipa-healthcheck
opendnssec
python-jwcrypto
[0.5.0-2]
- Address potential DoS with high compression ratio
Resolves: RHEL-28697
- Limit number of iterations for PBES
Resolves: RHEL-23036 RHEL-23037
python-kdcproxy
python-qrcode
python-yubico
pyusb
slapi-nis
softhsm
Fixed packages 30
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bind-dyndb-ldap | 0:11.6-5.module+el8.10.0+90339+985471f7 |
| Oracle Linux · 8 | custodia | 0:0.6.0-3.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | ipa-client | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | ipa-client-common | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | ipa-client-epn | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | ipa-client-samba | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | ipa-common | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | ipa-healthcheck | 0:0.12-3.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | ipa-healthcheck-core | 0:0.12-3.module+el8.9.0+90095+d672673c |
| Oracle Linux · 8 | ipa-python-compat | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | ipa-selinux | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | ipa-server | 0:4.9.13-9.0.1.module+el8.10.0+90339+985471f7 |
| Oracle Linux · 8 | ipa-server-common | 0:4.9.13-9.0.1.module+el8.10.0+90339+985471f7 |
| Oracle Linux · 8 | ipa-server-dns | 0:4.9.13-9.0.1.module+el8.10.0+90339+985471f7 |
| Oracle Linux · 8 | ipa-server-trust-ad | 0:4.9.13-9.0.1.module+el8.10.0+90339+985471f7 |
| Oracle Linux · 8 | opendnssec | 0:2.1.7-1.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-custodia | 0:0.6.0-3.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | python3-ipaclient | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | python3-ipalib | 0:4.9.13-9.0.1.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | python3-ipaserver | 0:4.9.13-9.0.1.module+el8.10.0+90339+985471f7 |
| Oracle Linux · 8 | python3-ipatests | 0:4.9.13-9.0.1.module+el8.10.0+90339+985471f7 |
| Oracle Linux · 8 | python3-jwcrypto | 0:0.5.0-2.module+el8.10.0+90340+9faa45ba |
| Oracle Linux · 8 | python3-kdcproxy | 0:0.4-5.module+el8.9.0+90122+3305dc1d |
| Oracle Linux · 8 | python3-pyusb | 0:1.0.0-9.1.module+el8.9.0+90095+d672673c |
| Oracle Linux · 8 | python3-qrcode | 0:5.1-12.module+el8.9.0+90095+d672673c |
| Oracle Linux · 8 | python3-qrcode-core | 0:5.1-12.module+el8.9.0+90095+d672673c |
| Oracle Linux · 8 | python3-yubico | 0:1.3.2-9.1.module+el8.9.0+90095+d672673c |
| Oracle Linux · 8 | slapi-nis | 0:0.60.0-4.module+el8.10.0+90297+bfe93ccc |
| Oracle Linux · 8 | softhsm | 0:2.6.0-5.module+el8.9.0+90094+20819f5a |
| Oracle Linux · 8 | softhsm-devel | 0:2.6.0-5.module+el8.9.0+90094+20819f5a |
Vulnerabilities 2
-
Medium 6.8
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious JWE Token with a high compression ratio. When the server processes this token, i…
-
Medium 5.3
Jwcrypto: denail of service via specifically crafted jwe
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational cons…