Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3267
HistoryMay 29, 2024 - 12:00 a.m.

idm:DL1 and idm:client security update

2024-05-2900:00:00
linux.oracle.com
3
idm
client
security
update
bind-dyndb-ldap
custodia
ipa
rhel
oracle linux
dcerpc
test fixes
python-jwcrypto
dos
pbes
kdcproxy
qrcode
yubico
usb
nis
softhsm
unix

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

bind-dyndb-ldap
custodia
ipa
[4.9.13-9.0.1]

  • Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
    [9.4.13-9]
  • dcerpc: invalidate forest trust intfo cache when filtering out realm domains
    Resolves: RHEL-28559
  • Backport latests test fixes in python3-tests
    ipatests: add xfail for autoprivate group test with override
    ipatests: remove xfail thanks to sssd 2.9.4
    ipatests: adapt for new automembership fixup behavior
    ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases
    test_xmlrpc: adopt to automember plugin message changes in 389-ds
    Resolves: RHEL-29908
    ipa-healthcheck
    opendnssec
    python-jwcrypto
    [0.5.0-2]
  • Address potential DoS with high compression ratio
    Resolves: RHEL-28697
  • Limit number of iterations for PBES
    Resolves: RHEL-23036 RHEL-23037
    python-kdcproxy
    python-qrcode
    python-yubico
    pyusb
    slapi-nis
    softhsm

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%