RHSA-2024:3754: Important: ipa security update
Published Jun 10, 2024
·Updated
Important: ipa security update
Other sources
Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.Security Fix(es): freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698) freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
71 affected componentsFixes available
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for ARM 64
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems
redhat/ipa<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-common<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-epn<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-samba<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-common<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-debugsource<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-selinux<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-common<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-dns<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-trust-ad<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-trust-ad-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/python3-ipaclient<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/python3-ipalib<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/python3-ipaserver<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-epn<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-samba<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-debugsource<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-trust-ad<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-trust-ad-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-epn<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client-samba<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-debugsource<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-trust-ad<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-server-trust-ad-debuginfo<4.11.0-15.el9_4
4.11.0-15.el9_4
redhat/ipa-client<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-client-debuginfo<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-client-epn<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-client-samba<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-debuginfo<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-debugsource<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-server<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-server-debuginfo<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-server-trust-ad<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/ipa-server-trust-ad-debuginfo<4.11.0-15.el9_4.aa
4.11.0-15.el9_4.aa
redhat/python3-ipatests<4.11.0-15.el9_4
4.11.0-15.el9_4
Remediation
Event History
Jun 10, 2024
Advisory Published
via Red Hat·12:00 AM
Advisory Published
via Red Hat·01:34 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:3754?
The severity of RHSA-2024:3754 is classified as important.
2
How do I fix RHSA-2024:3754?
To fix RHSA-2024:3754, you should upgrade the affected packages to version 4.11.0-15.el9_4.
3
What products are affected by RHSA-2024:3754?
RHSA-2024:3754 affects various Red Hat Enterprise Linux products, including systems for x86_64, ARM, and IBM z Systems.
4
Is there a workaround available for RHSA-2024:3754?
No specific workaround is provided for RHSA-2024:3754; applying the necessary updates is recommended.
5
What packages are included in the RHSA-2024:3754 update?
The RHSA-2024:3754 update includes packages such as ipa, ipa-client, and ipa-server, among others.