Red Hat Security AdvisoryRHSA-2024:3756
idm:DL1 security update
Released 2024-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) bind-dyndb-ldap-11.6-2.module+el8.4.0+21736+855b82c8.1.src::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+21736+855b82c8.1.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +39
- Red Hat Enterprise Linux AppStream E4S (v.8.4) bind-dyndb-ldap-11.6-2.module+el8.4.0+21736+855b82c8.1.ppc64le::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+21736+855b82c8.1.src::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+21736+855b82c8.1.x86_64::idm:DL1 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) bind-dyndb-ldap-11.6-2.module+el8.4.0+21736+855b82c8.1.src::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+21736+855b82c8.1.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +39
Fixes 1 record
Priority MEDIUM 41
A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02053 · Published 2024-06-12 · Fixed in 4.12.1, 4.6.8-5.el7_9.17 +8 CWE-916
