ipa security update

2024-06-1000:00:00

linux.oracle.com

ipa

security update

rhel

bind

cve resolutions

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.5

Confidence

Low

EPSS

Percentile

16.4%

JSON

[4.11.0-15.0.1]

Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
Add bind to ipa-server-common Requires [Orabug: 36518596]
[4.11.0-15]
Resolves: RHEL-32231 CVE-2024-3183 ipa: freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
Resolves: RHEL-31409 CVE-2024-2698 ipa: freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

OSVersionArchitecturePackageVersionFilename
oracle linux9srcipa< 4.11.0-15.0.1.el9_4ipa-4.11.0-15.0.1.el9_4.src.rpm
oracle linux9srcipa< 4.11.0-15.0.1.el9_4ipa-4.11.0-15.0.1.el9_4.src.rpm
oracle linux9aarch64ipa-client< 4.11.0-15.0.1.el9_4ipa-client-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux9noarchipa-client-common< 4.11.0-15.0.1.el9_4ipa-client-common-4.11.0-15.0.1.el9_4.noarch.rpm
oracle linux9aarch64ipa-client-epn< 4.11.0-15.0.1.el9_4ipa-client-epn-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux9aarch64ipa-client-samba< 4.11.0-15.0.1.el9_4ipa-client-samba-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux9noarchipa-common< 4.11.0-15.0.1.el9_4ipa-common-4.11.0-15.0.1.el9_4.noarch.rpm
oracle linux9noarchipa-selinux< 4.11.0-15.0.1.el9_4ipa-selinux-4.11.0-15.0.1.el9_4.noarch.rpm
oracle linux9aarch64ipa-server< 4.11.0-15.0.1.el9_4ipa-server-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux9noarchipa-server-common< 4.11.0-15.0.1.el9_4ipa-server-common-4.11.0-15.0.1.el9_4.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	ipa	< 4.11.0-15.0.1.el9_4	ipa-4.11.0-15.0.1.el9_4.src.rpm
oracle linux	9	src	ipa	< 4.11.0-15.0.1.el9_4	ipa-4.11.0-15.0.1.el9_4.src.rpm
oracle linux	9	aarch64	ipa-client	< 4.11.0-15.0.1.el9_4	ipa-client-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux	9	noarch	ipa-client-common	< 4.11.0-15.0.1.el9_4	ipa-client-common-4.11.0-15.0.1.el9_4.noarch.rpm
oracle linux	9	aarch64	ipa-client-epn	< 4.11.0-15.0.1.el9_4	ipa-client-epn-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux	9	aarch64	ipa-client-samba	< 4.11.0-15.0.1.el9_4	ipa-client-samba-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux	9	noarch	ipa-common	< 4.11.0-15.0.1.el9_4	ipa-common-4.11.0-15.0.1.el9_4.noarch.rpm
oracle linux	9	noarch	ipa-selinux	< 4.11.0-15.0.1.el9_4	ipa-selinux-4.11.0-15.0.1.el9_4.noarch.rpm
oracle linux	9	aarch64	ipa-server	< 4.11.0-15.0.1.el9_4	ipa-server-4.11.0-15.0.1.el9_4.aarch64.rpm
oracle linux	9	noarch	ipa-server-common	< 4.11.0-15.0.1.el9_4	ipa-server-common-4.11.0-15.0.1.el9_4.noarch.rpm