Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-client | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-client-common | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-client-debuginfo | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-client-epn | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-client-samba | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-common | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-debuginfo | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-debugsource | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-selinux | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-server | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-server-common | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-server-debuginfo | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-server-dns | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-server-trust-ad | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | ipa-server-trust-ad-debuginfo | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | python3-ipaclient | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | python3-ipalib | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream | python3-ipaserver | 0:4.9.8-11.el9_0.3 |
| Red Hat · RHEL 9.0 EUS rhel_eus:9.0::crb | python3-ipatests | 0:4.9.8-11.el9_0.3 |
Vulnerabilities 1
-
High 8.1CVE-2024-3183 Public exploit
Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the t…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2270685
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3761.json
-
report
https://access.redhat.com/security/cve/CVE-2024-3183
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-3183
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-3183
-
article
https://www.freeipa.org/release-notes/4-12-1.html