(RHSA-2024:3267) Moderate: idm:DL1 and idm:client security update

2024-05-2210:41:24

access.redhat.com

red hat; identity management; security update; jwcrypto; python-jwcrypto; denial of service; cve-2023-6681; cve-2024-28102; authentication; authorization; enterprise.

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

JWCrypto: denail of service Via specifically crafted JWE (CVE-2023-6681)
python-jwcrypto: malicious JWE token can cause denial of service (CVE-2024-28102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64ipa-client-debuginfo< 4.9.13-9.module+el8.10.0+21691+df63127dipa-client-debuginfo-4.9.13-9.module+el8.10.0+21691+df63127d.aarch64.rpm
RedHatanynoarchpython3-yubico< 1.3.2-9.1.module+el8.9.0+18920+2223d05epython3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e.noarch.rpm
RedHatanys390xipa-client-debuginfo< 4.9.13-9.module+el8.10.0+21692+c9b201bcipa-client-debuginfo-4.9.13-9.module+el8.10.0+21692+c9b201bc.s390x.rpm
RedHatanynoarchpython3-ipalib< 4.9.13-9.module+el8.10.0+21691+df63127dpython3-ipalib-4.9.13-9.module+el8.10.0+21691+df63127d.noarch.rpm
RedHatanyaarch64softhsm< 2.6.0-5.module+el8.9.0+18911+94941f82softhsm-2.6.0-5.module+el8.9.0+18911+94941f82.aarch64.rpm
RedHatanys390xopendnssec< 2.1.7-1.module+el8.9.0+18911+94941f82opendnssec-2.1.7-1.module+el8.9.0+18911+94941f82.s390x.rpm
RedHatanyppc64lesofthsm-debuginfo< 2.6.0-5.module+el8.9.0+18911+94941f82softhsm-debuginfo-2.6.0-5.module+el8.9.0+18911+94941f82.ppc64le.rpm
RedHatanyaarch64ipa-client-epn< 4.9.13-9.module+el8.10.0+21691+df63127dipa-client-epn-4.9.13-9.module+el8.10.0+21691+df63127d.aarch64.rpm
RedHatanyx86_64opendnssec-debuginfo< 2.1.7-1.module+el8.9.0+18911+94941f82opendnssec-debuginfo-2.1.7-1.module+el8.9.0+18911+94941f82.x86_64.rpm
RedHatanynoarchpython3-jwcrypto< 0.5.0-2.module+el8.10.0+21691+df63127dpython3-jwcrypto-0.5.0-2.module+el8.10.0+21691+df63127d.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	ipa-client-debuginfo	< 4.9.13-9.module+el8.10.0+21691+df63127d	ipa-client-debuginfo-4.9.13-9.module+el8.10.0+21691+df63127d.aarch64.rpm
RedHat	any	noarch	python3-yubico	< 1.3.2-9.1.module+el8.9.0+18920+2223d05e	python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e.noarch.rpm
RedHat	any	s390x	ipa-client-debuginfo	< 4.9.13-9.module+el8.10.0+21692+c9b201bc	ipa-client-debuginfo-4.9.13-9.module+el8.10.0+21692+c9b201bc.s390x.rpm
RedHat	any	noarch	python3-ipalib	< 4.9.13-9.module+el8.10.0+21691+df63127d	python3-ipalib-4.9.13-9.module+el8.10.0+21691+df63127d.noarch.rpm
RedHat	any	aarch64	softhsm	< 2.6.0-5.module+el8.9.0+18911+94941f82	softhsm-2.6.0-5.module+el8.9.0+18911+94941f82.aarch64.rpm
RedHat	any	s390x	opendnssec	< 2.1.7-1.module+el8.9.0+18911+94941f82	opendnssec-2.1.7-1.module+el8.9.0+18911+94941f82.s390x.rpm
RedHat	any	ppc64le	softhsm-debuginfo	< 2.6.0-5.module+el8.9.0+18911+94941f82	softhsm-debuginfo-2.6.0-5.module+el8.9.0+18911+94941f82.ppc64le.rpm
RedHat	any	aarch64	ipa-client-epn	< 4.9.13-9.module+el8.10.0+21691+df63127d	ipa-client-epn-4.9.13-9.module+el8.10.0+21691+df63127d.aarch64.rpm
RedHat	any	x86_64	opendnssec-debuginfo	< 2.1.7-1.module+el8.9.0+18911+94941f82	opendnssec-debuginfo-2.1.7-1.module+el8.9.0+18911+94941f82.x86_64.rpm
RedHat	any	noarch	python3-jwcrypto	< 0.5.0-2.module+el8.10.0+21691+df63127d	python3-jwcrypto-0.5.0-2.module+el8.10.0+21691+df63127d.noarch.rpm