Description
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | freeipa | 4.11.1-1 | — |
| Debian 13 | freeipa | 4.11.1-1 | — |
| Debian 12 | freeipa | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | freeipa | No fix yet | — |
| Ubuntu 26.04 LTS | freeipa | No fix yet | — |
| Ubuntu 25.10 | freeipa | No fix yet | — |
| Ubuntu 24.04 LTS | freeipa | No fix yet | — |
| Ubuntu 22.04 LTS | freeipa | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | freeipa | No fix yet | — |
| Ubuntu 18.04 LTS | freeipa | No fix yet | — |
| Ubuntu Pro 16.04 LTS | freeipa | No fix yet | — |
| Ubuntu Pro 14.04 LTS | freeipa | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | ipa +14 | 4.10.2-5.el9_3 | RHSA-2024:0141 |
| RHEL 8 | bind-dyndb-ldap | 11.6-4.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | custodia +1 | 0.6.0-3.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | ipa +15 | 4.9.12-11.module+el8.9.0+20824+f2605038 | RHSA-2024:0143 |
| RHEL 8 | ipa-healthcheck +1 | 0.12-3.module+el8.9.0+19634+c162f948 | RHSA-2024:0143 |
| RHEL 8 | opendnssec | 2.1.7-1.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | python-jwcrypto +1 | 0.5.0-1.1.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | python-kdcproxy +1 | 0.4-5.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | python-qrcode +2 | 5.1-12.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | python-yubico +1 | 1.3.2-9.1.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | pyusb +1 | 1.0.0-9.1.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 8 | slapi-nis | 0.60.0-4.module+el8.9.0+20420+fef9eb45 | RHSA-2024:0143 |
| RHEL 8 | softhsm +1 | 2.6.0-5.module+el8.9.0+18911+94941f82 | RHSA-2024:0143 |
| RHEL 7 | ipa +11 | 4.6.8-5.el7_9.16 | RHSA-2024:0145 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | ipa +14 | 4.10.1-10.el9_2 | RHSA-2024:0142 |
| RHEL 9.0 EUS | ipa +14 | 4.9.8-9.el9_0 | RHSA-2024:0140 |
| RHEL 8.8 EUS | bind-dyndb-ldap | 11.6-4.module+el8.8.0+17351+9a3fb056 | RHSA-2024:0137 |
| RHEL 8.8 EUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0137 |
| RHEL 8.8 EUS | ipa +15 | 4.9.11-9.module+el8.8.0+20825+52dd1628 | RHSA-2024:0137 |
| RHEL 8.8 EUS | ipa-healthcheck +1 | 0.12-1.module+el8.8.0+17582+6bf5bf91 | RHSA-2024:0137 |
| RHEL 8.8 EUS | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0137 |
| RHEL 8.8 EUS | python-jwcrypto +1 | 0.5.0-1.1.module+el8.7.0+15842+306cbc83 | RHSA-2024:0137 |
| RHEL 8.8 EUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0137 |
| RHEL 8.8 EUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0137 |
| RHEL 8.8 EUS | python-yubico +1 | 1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5 | RHSA-2024:0137 |
| RHEL 8.8 EUS | pyusb +1 | 1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5 | RHSA-2024:0137 |
| RHEL 8.8 EUS | slapi-nis | 0.60.0-4.module+el8.8.0+20635+330e3683 | RHSA-2024:0137 |
| RHEL 8.8 EUS | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2024:0137 |
| RHEL 8.6 EUS | bind-dyndb-ldap | 11.6-4.module+el8.6.0+16878+6c033536 | RHSA-2024:0139 |
| RHEL 8.6 EUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0139 |
| RHEL 8.6 EUS | ipa +15 | 4.9.8-11.module+el8.6.0+20984+095e5c46 | RHSA-2024:0139 |
| RHEL 8.6 EUS | ipa-healthcheck +1 | 0.7-10.module+el8.6.0+14292+18b36d36 | RHSA-2024:0139 |
| RHEL 8.6 EUS | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0139 |
| RHEL 8.6 EUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2024:0139 |
| RHEL 8.6 EUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0139 |
| RHEL 8.6 EUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0139 |
| RHEL 8.6 EUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2024:0139 |
| RHEL 8.6 EUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2024:0139 |
| RHEL 8.6 EUS | slapi-nis | 0.60.0-1.module+el8.6.0+16878+6c033536 | RHSA-2024:0139 |
| RHEL 8.6 EUS | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2024:0139 |
| RHEL 8.4 TUS | bind-dyndb-ldap | 11.6-2.module+el8.4.0+9328+4ec4e316 | RHSA-2024:0138 |
| RHEL 8.4 TUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 TUS | ipa +15 | 4.9.2-10.module+el8.4.0+20744+ffd02a6d | RHSA-2024:0138 |
| RHEL 8.4 TUS | ipa-healthcheck +1 | 0.7-3.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0138 |
| RHEL 8.4 TUS | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0138 |
| RHEL 8.4 TUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 TUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0138 |
| RHEL 8.4 TUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 TUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 TUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 TUS | slapi-nis | 0.56.6-2.1.module+el8.4.0+12579+0538eac8 | RHSA-2024:0138 |
| RHEL 8.4 TUS | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2024:0138 |
| RHEL 8.4 E4S | bind-dyndb-ldap | 11.6-2.module+el8.4.0+9328+4ec4e316 | RHSA-2024:0138 |
| RHEL 8.4 E4S | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 E4S | ipa +15 | 4.9.2-10.module+el8.4.0+20744+ffd02a6d | RHSA-2024:0138 |
| RHEL 8.4 E4S | ipa-healthcheck +1 | 0.7-3.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0138 |
| RHEL 8.4 E4S | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0138 |
| RHEL 8.4 E4S | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 E4S | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0138 |
| RHEL 8.4 E4S | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 E4S | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 E4S | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 E4S | slapi-nis | 0.56.6-2.1.module+el8.4.0+12579+0538eac8 | RHSA-2024:0138 |
| RHEL 8.4 E4S | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2024:0138 |
| RHEL 8.4 AUS | bind-dyndb-ldap | 11.6-2.module+el8.4.0+9328+4ec4e316 | RHSA-2024:0138 |
| RHEL 8.4 AUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 AUS | ipa +15 | 4.9.2-10.module+el8.4.0+20744+ffd02a6d | RHSA-2024:0138 |
| RHEL 8.4 AUS | ipa-healthcheck +1 | 0.7-3.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0138 |
| RHEL 8.4 AUS | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2024:0138 |
| RHEL 8.4 AUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 AUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0138 |
| RHEL 8.4 AUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 AUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 AUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2024:0138 |
| RHEL 8.4 AUS | slapi-nis | 0.56.6-2.1.module+el8.4.0+12579+0538eac8 | RHSA-2024:0138 |
| RHEL 8.4 AUS | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2024:0138 |
| RHEL 8.2 TUS | bind-dyndb-ldap | 11.2-3.module+el8.2.0+4921+923e30d5 | RHSA-2024:0144 |
| RHEL 8.2 TUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 TUS | ipa +12 | 4.8.4-14.module+el8.2.0+20745+1d1ce1ed | RHSA-2024:0144 |
| RHEL 8.2 TUS | ipa-healthcheck +1 | 0.4-4.module+el8.2.0+5489+95477d9f | RHSA-2024:0144 |
| RHEL 8.2 TUS | ipa-idoverride-memberof +1 | 0.0.4-6.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 TUS | opendnssec | 1.4.14-1.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 TUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 TUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0144 |
| RHEL 8.2 TUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 TUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 TUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 TUS | slapi-nis | 0.56.3-3.module+el8.2.0+10782+8facb0b2 | RHSA-2024:0144 |
| RHEL 8.2 TUS | softhsm +1 | 2.4.0-4.module+el8.2.0+5779+a38c524f | RHSA-2024:0144 |
| RHEL 8.2 E4S | bind-dyndb-ldap | 11.2-3.module+el8.2.0+4921+923e30d5 | RHSA-2024:0144 |
| RHEL 8.2 E4S | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 E4S | ipa +12 | 4.8.4-14.module+el8.2.0+20745+1d1ce1ed | RHSA-2024:0144 |
| RHEL 8.2 E4S | ipa-healthcheck +1 | 0.4-4.module+el8.2.0+5489+95477d9f | RHSA-2024:0144 |
| RHEL 8.2 E4S | ipa-idoverride-memberof +1 | 0.0.4-6.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 E4S | opendnssec | 1.4.14-1.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 E4S | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 E4S | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0144 |
| RHEL 8.2 E4S | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 E4S | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 E4S | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 E4S | slapi-nis | 0.56.3-3.module+el8.2.0+10782+8facb0b2 | RHSA-2024:0144 |
| RHEL 8.2 E4S | softhsm +1 | 2.4.0-4.module+el8.2.0+5779+a38c524f | RHSA-2024:0144 |
| RHEL 8.2 AUS | bind-dyndb-ldap | 11.2-3.module+el8.2.0+4921+923e30d5 | RHSA-2024:0144 |
| RHEL 8.2 AUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 AUS | ipa +12 | 4.8.4-14.module+el8.2.0+20745+1d1ce1ed | RHSA-2024:0144 |
| RHEL 8.2 AUS | ipa-healthcheck +1 | 0.4-4.module+el8.2.0+5489+95477d9f | RHSA-2024:0144 |
| RHEL 8.2 AUS | ipa-idoverride-memberof +1 | 0.0.4-6.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 AUS | opendnssec | 1.4.14-1.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 AUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 AUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2024:0144 |
| RHEL 8.2 AUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 AUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 AUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2024:0144 |
| RHEL 8.2 AUS | slapi-nis | 0.56.3-3.module+el8.2.0+10782+8facb0b2 | RHSA-2024:0144 |
| RHEL 8.2 AUS | softhsm +1 | 2.4.0-4.module+el8.2.0+5779+a38c524f | RHSA-2024:0144 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | ipa-client +13 | 4.10.2-5.el9_3.alma.1 | ALSA-2024:0141 |
| AlmaLinux 8 | bind-dyndb-ldap | 11.6-4.module_el8.6.0+3339+9b5fdd22 | ALSA-2024:0143 |
| AlmaLinux 8 | custodia +1 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | ALSA-2024:0143 |
| AlmaLinux 8 | ipa-client +14 | 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1 | ALSA-2024:0143 |
| AlmaLinux 8 | ipa-healthcheck +1 | 0.12-3.module_el8.9.0+3651+d05ea4c5 | ALSA-2024:0143 |
| AlmaLinux 8 | opendnssec | 2.1.7-1.module_el8.6.0+2881+2f24dc92 | ALSA-2024:0143 |
| AlmaLinux 8 | python3-jwcrypto | 0.5.0-1.1.module_el8.7.0+3349+cfeff52e | ALSA-2024:0143 |
| AlmaLinux 8 | python3-kdcproxy | 0.4-5.module_el8.9.0+3682+f63caf3e | ALSA-2024:0143 |
| AlmaLinux 8 | python3-pyusb | 1.0.0-9.1.module_el8.7.0+3349+cfeff52e | ALSA-2024:0143 |
| AlmaLinux 8 | python3-qrcode +1 | 5.1-12.module_el8.6.0+2881+2f24dc92 | ALSA-2024:0143 |
| AlmaLinux 8 | python3-yubico | 1.3.2-9.1.module_el8.7.0+3349+cfeff52e | ALSA-2024:0143 |
| AlmaLinux 8 | slapi-nis | 0.60.0-4.module_el8.9.0+3682+f63caf3e.alma.1 | ALSA-2024:0143 |
| AlmaLinux 8 | softhsm +1 | 2.6.0-5.module_el8.6.0+2881+2f24dc92 | ALSA-2024:0143 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | custodia | 0.6.0-3.module+el8.9.0+1371+ffa84eb9 | RLSA-2024:0143 |
| Rocky Linux 8 | ipa-healthcheck | 0.12-3.module+el8.9.0+1433+5bd2f890 | RLSA-2024:0143 |
| Rocky Linux 8 | opendnssec | 2.1.7-1.module+el8.9.0+1371+ffa84eb9 | RLSA-2024:0143 |
| Rocky Linux 8 | python-kdcproxy | 0.4-5.module+el8.9.0+1371+ffa84eb9 | RLSA-2024:0143 |
| Rocky Linux 8 | python-qrcode | 5.1-12.module+el8.9.0+1371+ffa84eb9 | RLSA-2024:0143 |
| Rocky Linux 8 | python-yubico | 1.3.2-9.1.module+el8.9.0+1371+ffa84eb9 | RLSA-2024:0143 |
| Rocky Linux 8 | pyusb | 1.0.0-9.1.module+el8.9.0+1371+ffa84eb9 | RLSA-2024:0143 |
| Rocky Linux 8 | slapi-nis | 0.60.0-4.module+el8.9.0+1573+39ab85f4 | RLSA-2024:0143 |
| Rocky Linux 8 | softhsm | 2.6.0-5.module+el8.9.0+1371+ffa84eb9 | RLSA-2024:0143 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | ipa-client +10 | 4.6.8-5.amzn2.4.3 | ALAS2-2024-2457 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | ipa-client +13 | 4.10.2-5.0.1.el9_3 | ELSA-2024-0141 |
| Oracle Linux 8 | bind-dyndb-ldap | 11.6-4.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | custodia +1 | 0.6.0-3.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | ipa-client +14 | 4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d | ELSA-2024-0143 |
| Oracle Linux 8 | ipa-healthcheck +1 | 0.12-3.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | opendnssec | 2.1.7-1.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | python3-jwcrypto | 0.5.0-1.1.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | python3-kdcproxy | 0.4-5.module+el8.9.0+90122+3305dc1d | ELSA-2024-0143 |
| Oracle Linux 8 | python3-pyusb | 1.0.0-9.1.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | python3-qrcode +1 | 5.1-12.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | python3-yubico | 1.3.2-9.1.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | slapi-nis | 0.60.0-4.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 8 | softhsm +1 | 2.6.0-5.module+el8.9.0+90094+20819f5a | ELSA-2024-0143 |
| Oracle Linux 7 | ipa-client +10 | 4.6.8-5.0.1.el7_9.16 | ELSA-2024-0145 |
Advisories 17
- ALSA-2024:0141 Moderate: ipa security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0143 Moderate: idm:DL1 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:0143 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2024:0137 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2024:0139 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2024:0142 Red Hat Security Advisory: ipa security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:0140 Red Hat Security Advisory: ipa security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:0141 Red Hat Security Advisory: ipa security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:0145 Red Hat Security Advisory: ipa security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:0144 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:0138 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RLSA-2024:0143 Moderate: idm:DL1 security update Rocky Linux Security Advisories · Oct 9, 2025
- WID-SEC-2024-0067 Red Hat Enterprise Linux & Oracle Linux (IPA): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Feb 19, 2024
- ALAS2-2024-2457 Moderate: ipa security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 19, 2024
- ELSA-2024-0143 Moderate: idm:DL1 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jan 12, 2024
- ELSA-2024-0141 Moderate: ipa security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jan 11, 2024
- ELSA-2024-0145 Moderate: ipa security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 10, 2024
References
- RHSA-2024:0137 vendor-advisory
- RHSA-2024:0138 vendor-advisory
- RHSA-2024:0139 vendor-advisory
- RHSA-2024:0140 vendor-advisory
- RHSA-2024:0141 vendor-advisory
- RHSA-2024:0142 vendor-advisory
- RHSA-2024:0143 vendor-advisory
- RHSA-2024:0144 vendor-advisory
- RHSA-2024:0145 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-5455 vdb-entry
- RHBZ#2242828 issue-tracking
- https://www.freeipa.org/release-notes/4-10-3.html
- https://www.freeipa.org/release-notes/4-11-1.html
- https://www.freeipa.org/release-notes/4-6-10.html
- https://www.freeipa.org/release-notes/4-9-14.html