(RHSA-2024:3044) Moderate: idm:DL1 security update

2024-05-2206:35:26

access.redhat.com

red hat

identity management

authentication

authorization

freeipa fix

denial of service

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchpython3-yubico< 1.3.2-9.1.module+el8.9.0+18920+2223d05epython3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e.noarch.rpm
RedHatanynoarchipa-common< 4.9.13-8.module+el8.10.0+21433+ee1111fdipa-common-4.9.13-8.module+el8.10.0+21433+ee1111fd.noarch.rpm
RedHatanyaarch64softhsm< 2.6.0-5.module+el8.9.0+18911+94941f82softhsm-2.6.0-5.module+el8.9.0+18911+94941f82.aarch64.rpm
RedHatanys390xopendnssec< 2.1.7-1.module+el8.9.0+18911+94941f82opendnssec-2.1.7-1.module+el8.9.0+18911+94941f82.s390x.rpm
RedHatanyppc64lesofthsm-debuginfo< 2.6.0-5.module+el8.9.0+18911+94941f82softhsm-debuginfo-2.6.0-5.module+el8.9.0+18911+94941f82.ppc64le.rpm
RedHatanyx86_64opendnssec-debuginfo< 2.1.7-1.module+el8.9.0+18911+94941f82opendnssec-debuginfo-2.1.7-1.module+el8.9.0+18911+94941f82.x86_64.rpm
RedHatanys390xipa-debugsource< 4.9.13-8.module+el8.10.0+21432+ee17c097ipa-debugsource-4.9.13-8.module+el8.10.0+21432+ee17c097.s390x.rpm
RedHatanyaarch64ipa-server-trust-ad-debuginfo< 4.9.13-8.module+el8.10.0+21432+ee17c097ipa-server-trust-ad-debuginfo-4.9.13-8.module+el8.10.0+21432+ee17c097.aarch64.rpm
RedHatanyx86_64ipa-client-debuginfo< 4.9.13-8.module+el8.10.0+21433+ee1111fdipa-client-debuginfo-4.9.13-8.module+el8.10.0+21433+ee1111fd.x86_64.rpm
RedHatanyppc64lebind-dyndb-ldap< 11.6-4.module+el8.9.0+18911+94941f82bind-dyndb-ldap-11.6-4.module+el8.9.0+18911+94941f82.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	python3-yubico	< 1.3.2-9.1.module+el8.9.0+18920+2223d05e	python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e.noarch.rpm
RedHat	any	noarch	ipa-common	< 4.9.13-8.module+el8.10.0+21433+ee1111fd	ipa-common-4.9.13-8.module+el8.10.0+21433+ee1111fd.noarch.rpm
RedHat	any	aarch64	softhsm	< 2.6.0-5.module+el8.9.0+18911+94941f82	softhsm-2.6.0-5.module+el8.9.0+18911+94941f82.aarch64.rpm
RedHat	any	s390x	opendnssec	< 2.1.7-1.module+el8.9.0+18911+94941f82	opendnssec-2.1.7-1.module+el8.9.0+18911+94941f82.s390x.rpm
RedHat	any	ppc64le	softhsm-debuginfo	< 2.6.0-5.module+el8.9.0+18911+94941f82	softhsm-debuginfo-2.6.0-5.module+el8.9.0+18911+94941f82.ppc64le.rpm
RedHat	any	x86_64	opendnssec-debuginfo	< 2.1.7-1.module+el8.9.0+18911+94941f82	opendnssec-debuginfo-2.1.7-1.module+el8.9.0+18911+94941f82.x86_64.rpm
RedHat	any	s390x	ipa-debugsource	< 4.9.13-8.module+el8.10.0+21432+ee17c097	ipa-debugsource-4.9.13-8.module+el8.10.0+21432+ee17c097.s390x.rpm
RedHat	any	aarch64	ipa-server-trust-ad-debuginfo	< 4.9.13-8.module+el8.10.0+21432+ee17c097	ipa-server-trust-ad-debuginfo-4.9.13-8.module+el8.10.0+21432+ee17c097.aarch64.rpm
RedHat	any	x86_64	ipa-client-debuginfo	< 4.9.13-8.module+el8.10.0+21433+ee1111fd	ipa-client-debuginfo-4.9.13-8.module+el8.10.0+21433+ee1111fd.x86_64.rpm
RedHat	any	ppc64le	bind-dyndb-ldap	< 11.6-4.module+el8.9.0+18911+94941f82	bind-dyndb-ldap-11.6-4.module+el8.9.0+18911+94941f82.ppc64le.rpm