RHSA-2024:3761: Important: ipa security update
Published Jun 10, 2024
·Updated
Important: ipa security update
Other sources
Red Hat Identity Management (IdM) is a centralized authentication, identitymanagement, and authorization solution for both traditional and cloud-basedenterprise environments.Security Fix(es): ipa: freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183)For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s)listed in the References section
— Red Hat
Affected Software
62 affected componentsFixes available
redhat/ipa<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-common<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-epn<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-samba<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-common<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-debugsource<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-selinux<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-common<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-dns<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-trust-ad<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-trust-ad-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/python3-ipaclient<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/python3-ipalib<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/python3-ipaserver<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-epn<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-samba<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-debugsource<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-trust-ad<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-trust-ad-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-epn<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client-samba<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-debugsource<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-trust-ad<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-server-trust-ad-debuginfo<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
redhat/ipa-client<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-client-debuginfo<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-client-epn<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-client-samba<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-debuginfo<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-debugsource<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-server<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-server-debuginfo<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-server-trust-ad<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/ipa-server-trust-ad-debuginfo<4.9.8-11.el9_0.3.aa
4.9.8-11.el9_0.3.aa
redhat/python3-ipatests<4.9.8-11.el9_0.3
4.9.8-11.el9_0.3
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Remediation
Event History
Jun 10, 2024
Advisory Published
via Red Hat·01:35 PM
Feb 28, 2026
Advisory Published
via Red Hat·10:30 PM
Data Sourced
via Red Hat·10:30 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2024:3761?
The severity of RHSA-2024:3761 is classified as Important.
2
How do I fix RHSA-2024:3761?
To fix RHSA-2024:3761, you need to update your IPA packages to version 4.9.8-11.el9_0.3.
3
What products are affected by RHSA-2024:3761?
RHSA-2024:3761 affects various Red Hat products such as Red Hat Enterprise Linux and related IPA packages.
4
How can I check if my system is vulnerable to RHSA-2024:3761?
You can check for vulnerability by verifying the installed versions of the IPA packages on your system against the fixed version.
5
Is there a known exploit for RHSA-2024:3761?
There are no public exploits reported for RHSA-2024:3761 at this time.