(RHSA-2024:0138) Moderate: idm:DL1 security update

2024-01-1012:11:37

access.redhat.com

red hat identity management

centralized authentication

authorization solution

cve-2023-5455

csrf protection

enterprise environments

security fix

0.001 Low

EPSS

Percentile

35.6%

JSON

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

ipa: Invalid CSRF protection (CVE-2023-5455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lebind-dyndb-ldap-debugsource< 11.6-2.module+el8.4.0+9328+4ec4e316bind-dyndb-ldap-debugsource-11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le.rpm
RedHatanyx86_64slapi-nis-debugsource< 0.56.6-2.1.module+el8.4.0+12579+0538eac8slapi-nis-debugsource-0.56.6-2.1.module+el8.4.0+12579+0538eac8.x86_64.rpm
RedHatanyaarch64opendnssec< 2.1.7-1.module+el8.4.0+9007+5084bdd8opendnssec-2.1.7-1.module+el8.4.0+9007+5084bdd8.aarch64.rpm
RedHatanyx86_64opendnssec-debuginfo< 2.1.7-1.module+el8.4.0+9007+5084bdd8opendnssec-debuginfo-2.1.7-1.module+el8.4.0+9007+5084bdd8.x86_64.rpm
RedHatanys390xipa-debugsource< 4.9.2-10.module+el8.4.0+20744+ffd02a6dipa-debugsource-4.9.2-10.module+el8.4.0+20744+ffd02a6d.s390x.rpm
RedHatanyx86_64ipa-client< 4.9.2-10.module+el8.4.0+20744+ffd02a6dipa-client-4.9.2-10.module+el8.4.0+20744+ffd02a6d.x86_64.rpm
RedHatanyx86_64ipa-server< 4.9.2-10.module+el8.4.0+20744+ffd02a6dipa-server-4.9.2-10.module+el8.4.0+20744+ffd02a6d.x86_64.rpm
RedHatanyppc64lesofthsm-devel< 2.6.0-5.module+el8.4.0+10227+076cd560softhsm-devel-2.6.0-5.module+el8.4.0+10227+076cd560.ppc64le.rpm
RedHatanyx86_64bind-dyndb-ldap-debuginfo< 11.6-2.module+el8.4.0+9328+4ec4e316bind-dyndb-ldap-debuginfo-11.6-2.module+el8.4.0+9328+4ec4e316.x86_64.rpm
RedHatanynoarchipa-server-dns< 4.9.2-10.module+el8.4.0+20744+ffd02a6dipa-server-dns-4.9.2-10.module+el8.4.0+20744+ffd02a6d.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	bind-dyndb-ldap-debugsource	< 11.6-2.module+el8.4.0+9328+4ec4e316	bind-dyndb-ldap-debugsource-11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le.rpm
RedHat	any	x86_64	slapi-nis-debugsource	< 0.56.6-2.1.module+el8.4.0+12579+0538eac8	slapi-nis-debugsource-0.56.6-2.1.module+el8.4.0+12579+0538eac8.x86_64.rpm
RedHat	any	aarch64	opendnssec	< 2.1.7-1.module+el8.4.0+9007+5084bdd8	opendnssec-2.1.7-1.module+el8.4.0+9007+5084bdd8.aarch64.rpm
RedHat	any	x86_64	opendnssec-debuginfo	< 2.1.7-1.module+el8.4.0+9007+5084bdd8	opendnssec-debuginfo-2.1.7-1.module+el8.4.0+9007+5084bdd8.x86_64.rpm
RedHat	any	s390x	ipa-debugsource	< 4.9.2-10.module+el8.4.0+20744+ffd02a6d	ipa-debugsource-4.9.2-10.module+el8.4.0+20744+ffd02a6d.s390x.rpm
RedHat	any	x86_64	ipa-client	< 4.9.2-10.module+el8.4.0+20744+ffd02a6d	ipa-client-4.9.2-10.module+el8.4.0+20744+ffd02a6d.x86_64.rpm
RedHat	any	x86_64	ipa-server	< 4.9.2-10.module+el8.4.0+20744+ffd02a6d	ipa-server-4.9.2-10.module+el8.4.0+20744+ffd02a6d.x86_64.rpm
RedHat	any	ppc64le	softhsm-devel	< 2.6.0-5.module+el8.4.0+10227+076cd560	softhsm-devel-2.6.0-5.module+el8.4.0+10227+076cd560.ppc64le.rpm
RedHat	any	x86_64	bind-dyndb-ldap-debuginfo	< 11.6-2.module+el8.4.0+9328+4ec4e316	bind-dyndb-ldap-debuginfo-11.6-2.module+el8.4.0+9328+4ec4e316.x86_64.rpm
RedHat	any	noarch	ipa-server-dns	< 4.9.2-10.module+el8.4.0+20744+ffd02a6d	ipa-server-dns-4.9.2-10.module+el8.4.0+20744+ffd02a6d.noarch.rpm