Skip to content
OpenAdvisories
High RHSA-2020:0378 2 CVEs

Red Hat Security Advisory: ipa security and bug fix update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 52

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client ipa 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-client 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-client-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-debuginfo 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-python-compat 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server-dns 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server-trust-ad 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client python2-ipaclient 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client python2-ipalib 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::client python2-ipaserver 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-client 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-client-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-debuginfo 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-python-compat 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server-dns 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server-trust-ad 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode python2-ipaclient 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode python2-ipalib 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::computenode python2-ipaserver 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-client 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-client-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-debuginfo 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-python-compat 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server-dns 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server-trust-ad 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server python2-ipaclient 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server python2-ipalib 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::server python2-ipaserver 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-client 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-client-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-debuginfo 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-python-compat 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server-common 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server-dns 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server-trust-ad 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation python2-ipaclient 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation python2-ipalib 0:4.6.5-11.el7_7.4
Red Hat · RHEL 7 enterprise_linux:7::workstation python2-ipaserver 0:4.6.5-11.el7_7.4

Vulnerabilities 2

  • High 8.8
    CVE-2019-14867

    Code injection in FreeIPA

    A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unaut…

    Red Hat ipa freeipa freeipa Debian Ubuntu PyPI
  • Medium 5.7
    CVE-2019-10195

    FreeIPA logs passwords embedded in commands in calls using batch

    A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA mast…

    Red Hat ipa freeipa freeipa Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1726223
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1766920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1770728
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1781153
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0378.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-10195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10195
  • article
    https://www.freeipa.org/page/Releases/4.6.7
  • article
    https://www.freeipa.org/page/Releases/4.7.4
  • article
    https://www.freeipa.org/page/Releases/4.8.3
  • report
    https://access.redhat.com/security/cve/CVE-2019-14867
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-14867
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-14867