Issued:
2021-03-16
Updated:
2021-03-16

RHSA-2021:0860 - Moderate: ipa security and bug fix update

Synopsis

Moderate: ipa security and bug fix update

Type/Severity

Security Advisory Moderate

Topic

An update for ipa is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • jquery: Passing HTML containing

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • cannot issue certs with multiple IP addresses corresponding to different hosts (BZ#1846349)

  • CA-less install does not set required permissions on KDC certificate (BZ#1863619)

  • IdM Web UI shows users as disabled (BZ#1884819)

  • Authentication and login times are over several seconds due to unindexed ipaExternalMember (BZ#1892793)

  • improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find (BZ#1895197)

  • IPA WebUI inaccessible after upgrading to RHEL 8.3 - idoverride-memberof.js missing (BZ#1897253)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for Scientific Computing7x86_64
Red Hat Enterprise Linux for Power, little endian7ppc64le
Red Hat Enterprise Linux for Power, big endian7ppc64
Red Hat Enterprise Linux for IBM z Systems7s390x
Red Hat Enterprise Linux Workstation7x86_64
Red Hat Enterprise Linux Server7x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support7x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian7ppc64le
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian7ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)7s390x
Red Hat Enterprise Linux Desktop7x86_64

Updated Packages

  • ipa-debuginfo-4.6.8-5.el7_9.4.ppc64.rpm
  • python2-ipalib-4.6.8-5.el7_9.4.noarch.rpm
  • ipa-client-4.6.8-5.el7_9.4.s390x.rpm
  • ipa-client-4.6.8-5.el7_9.4.ppc64.rpm
  • ipa-client-common-4.6.8-5.el7_9.4.noarch.rpm
  • ipa-client-4.6.8-5.el7_9.4.x86_64.rpm
  • ipa-debuginfo-4.6.8-5.el7_9.4.x86_64.rpm
  • ipa-client-4.6.8-5.el7_9.4.ppc64le.rpm
  • ipa-server-4.6.8-5.el7_9.4.x86_64.rpm
  • ipa-debuginfo-4.6.8-5.el7_9.4.s390x.rpm
  • ipa-4.6.8-5.el7_9.4.src.rpm
  • python2-ipaserver-4.6.8-5.el7_9.4.noarch.rpm
  • ipa-python-compat-4.6.8-5.el7_9.4.noarch.rpm
  • ipa-server-common-4.6.8-5.el7_9.4.noarch.rpm
  • ipa-debuginfo-4.6.8-5.el7_9.4.ppc64le.rpm
  • ipa-common-4.6.8-5.el7_9.4.noarch.rpm
  • ipa-server-trust-ad-4.6.8-5.el7_9.4.x86_64.rpm
  • ipa-server-dns-4.6.8-5.el7_9.4.noarch.rpm
  • python2-ipaclient-4.6.8-5.el7_9.4.noarch.rpm

Fixes

CVEs

References

Additional information