Skip to content
OpenAdvisories
Unscored RHSA-2015:0728 2 CVEs

Red Hat Security Advisory: ipa and slapi-nis security and bug fix update

Published Sep 15, 2024 · Updated Jun 27, 2026

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client ipa 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::client ipa-admintools 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::client ipa-client 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::client ipa-debuginfo 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::client ipa-python 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server-trust-ad 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::client slapi-nis 0:0.54-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client slapi-nis-debuginfo 0:0.54-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-admintools 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-client 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-debuginfo 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-python 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server-trust-ad 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::computenode slapi-nis 0:0.54-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode slapi-nis-debuginfo 0:0.54-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server ipa 0:4.1.0-18.ael7b_1.3
Red Hat · RHEL 7 enterprise_linux:7::server ipa-admintools 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::server ipa-client 0:4.1.0-18.ael7b_1.3
Red Hat · RHEL 7 enterprise_linux:7::server ipa-debuginfo 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::server ipa-python 0:4.1.0-18.ael7b_1.3
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server-trust-ad 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::server slapi-nis 0:0.54-3.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server slapi-nis-debuginfo 0:0.54-3.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-admintools 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-client 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-debuginfo 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-python 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server-trust-ad 0:4.1.0-18.el7_1.3
Red Hat · RHEL 7 enterprise_linux:7::workstation slapi-nis 0:0.54-3.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation slapi-nis-debuginfo 0:0.54-3.el7_1

Vulnerabilities 2

  • Unscored —

    The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows rem…

  • Unscored —

    The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1195729
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1198430
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1198431
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1199060
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1199128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1205200
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0728.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-0283
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0283
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0283
  • report
    https://access.redhat.com/security/cve/CVE-2015-1827
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1827
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1827