ipa security and bug fix update

2021-12-1700:00:00

linux.oracle.com

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

JSON

[4.6.8-5.0.1]

Blank out header-logo.png product-name.png
Replace login-screen-logo.png [Orabug: 20362818]
[4.6.8-5.el7_9.10]
Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role

OSVersionArchitecturePackageVersionFilename
oracle linux7srcipa< 4.6.8-5.0.1.el7_9.10ipa-4.6.8-5.0.1.el7_9.10.src.rpm
oracle linux7aarch64ipa-client< 4.6.8-5.0.1.el7_9.10ipa-client-4.6.8-5.0.1.el7_9.10.aarch64.rpm
oracle linux7noarchipa-client-common< 4.6.8-5.0.1.el7_9.10ipa-client-common-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux7noarchipa-common< 4.6.8-5.0.1.el7_9.10ipa-common-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux7noarchipa-python-compat< 4.6.8-5.0.1.el7_9.10ipa-python-compat-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux7aarch64ipa-server< 4.6.8-5.0.1.el7_9.10ipa-server-4.6.8-5.0.1.el7_9.10.aarch64.rpm
oracle linux7noarchipa-server-common< 4.6.8-5.0.1.el7_9.10ipa-server-common-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux7noarchipa-server-dns< 4.6.8-5.0.1.el7_9.10ipa-server-dns-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux7aarch64ipa-server-trust-ad< 4.6.8-5.0.1.el7_9.10ipa-server-trust-ad-4.6.8-5.0.1.el7_9.10.aarch64.rpm
oracle linux7noarchpython2-ipaclient< 4.6.8-5.0.1.el7_9.10python2-ipaclient-4.6.8-5.0.1.el7_9.10.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	ipa	< 4.6.8-5.0.1.el7_9.10	ipa-4.6.8-5.0.1.el7_9.10.src.rpm
oracle linux	7	aarch64	ipa-client	< 4.6.8-5.0.1.el7_9.10	ipa-client-4.6.8-5.0.1.el7_9.10.aarch64.rpm
oracle linux	7	noarch	ipa-client-common	< 4.6.8-5.0.1.el7_9.10	ipa-client-common-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux	7	noarch	ipa-common	< 4.6.8-5.0.1.el7_9.10	ipa-common-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux	7	noarch	ipa-python-compat	< 4.6.8-5.0.1.el7_9.10	ipa-python-compat-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux	7	aarch64	ipa-server	< 4.6.8-5.0.1.el7_9.10	ipa-server-4.6.8-5.0.1.el7_9.10.aarch64.rpm
oracle linux	7	noarch	ipa-server-common	< 4.6.8-5.0.1.el7_9.10	ipa-server-common-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux	7	noarch	ipa-server-dns	< 4.6.8-5.0.1.el7_9.10	ipa-server-dns-4.6.8-5.0.1.el7_9.10.noarch.rpm
oracle linux	7	aarch64	ipa-server-trust-ad	< 4.6.8-5.0.1.el7_9.10	ipa-server-trust-ad-4.6.8-5.0.1.el7_9.10.aarch64.rpm
oracle linux	7	noarch	python2-ipaclient	< 4.6.8-5.0.1.el7_9.10	python2-ipaclient-4.6.8-5.0.1.el7_9.10.noarch.rpm