Moderate: ipa security update

2024-04-3000:00:00

errata.almalinux.org

almalinux

identity management

security update

denial of service

cve-2024-1481

enterprise environments

authentication

authorization

freeipa

http requests

cvss score

release notes

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

JSON

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchipa-selinux< 4.11.0-9.el9_4ipa-selinux-4.11.0-9.el9_4.noarch.rpm
almalinux9noarchipa-client-common< 4.11.0-9.el9_4ipa-client-common-4.11.0-9.el9_4.noarch.rpm
almalinux9noarchpython3-ipaserver< 4.11.0-9.el9_4python3-ipaserver-4.11.0-9.el9_4.noarch.rpm
almalinux9noarchpython3-ipalib< 4.11.0-9.el9_4python3-ipalib-4.11.0-9.el9_4.noarch.rpm
almalinux9noarchpython3-ipaclient< 4.11.0-9.el9_4python3-ipaclient-4.11.0-9.el9_4.noarch.rpm
almalinux9noarchipa-server-common< 4.11.0-9.el9_4ipa-server-common-4.11.0-9.el9_4.noarch.rpm
almalinux9noarchipa-common< 4.11.0-9.el9_4ipa-common-4.11.0-9.el9_4.noarch.rpm
almalinux9noarchipa-server-dns< 4.11.0-9.el9_4ipa-server-dns-4.11.0-9.el9_4.noarch.rpm
almalinux9ppc64leipa-client< 4.11.0-9.el9_4ipa-client-4.11.0-9.el9_4.ppc64le.rpm
almalinux9ppc64leipa-client-epn< 4.11.0-9.el9_4ipa-client-epn-4.11.0-9.el9_4.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	ipa-selinux	< 4.11.0-9.el9_4	ipa-selinux-4.11.0-9.el9_4.noarch.rpm
almalinux	9	noarch	ipa-client-common	< 4.11.0-9.el9_4	ipa-client-common-4.11.0-9.el9_4.noarch.rpm
almalinux	9	noarch	python3-ipaserver	< 4.11.0-9.el9_4	python3-ipaserver-4.11.0-9.el9_4.noarch.rpm
almalinux	9	noarch	python3-ipalib	< 4.11.0-9.el9_4	python3-ipalib-4.11.0-9.el9_4.noarch.rpm
almalinux	9	noarch	python3-ipaclient	< 4.11.0-9.el9_4	python3-ipaclient-4.11.0-9.el9_4.noarch.rpm
almalinux	9	noarch	ipa-server-common	< 4.11.0-9.el9_4	ipa-server-common-4.11.0-9.el9_4.noarch.rpm
almalinux	9	noarch	ipa-common	< 4.11.0-9.el9_4	ipa-common-4.11.0-9.el9_4.noarch.rpm
almalinux	9	noarch	ipa-server-dns	< 4.11.0-9.el9_4	ipa-server-dns-4.11.0-9.el9_4.noarch.rpm
almalinux	9	ppc64le	ipa-client	< 4.11.0-9.el9_4	ipa-client-4.11.0-9.el9_4.ppc64le.rpm
almalinux	9	ppc64le	ipa-client-epn	< 4.11.0-9.el9_4	ipa-client-epn-4.11.0-9.el9_4.ppc64le.rpm