Red Hat Security AdvisoryRHSA-2024:3760
ipa security update
Released 2024-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ipa-4.6.8-5.el7_9.17, ipa-client-4.6.8-5.el7_9.17, ipa-client-common-4.6.8-5.el7_9.17 +4
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-server-4.6.8-5.el7_9.17, ipa-server-common-4.6.8-5.el7_9.17, ipa-server-dns-4.6.8-5.el7_9.17 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-server-4.6.8-5.el7_9.17, ipa-server-common-4.6.8-5.el7_9.17, ipa-server-dns-4.6.8-5.el7_9.17 +2
- Red Hat Enterprise Linux Server (v. 7) ipa-4.6.8-5.el7_9.17, ipa-client-4.6.8-5.el7_9.17, ipa-client-common-4.6.8-5.el7_9.17 +9
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.6.8-5.el7_9.17, ipa-client-4.6.8-5.el7_9.17, ipa-client-common-4.6.8-5.el7_9.17 +9
Fixes 1 record
Priority MEDIUM 41
A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02053 · Published 2024-06-12 · Fixed in 4.12.1, 4.6.8-5.el7_9.17 +8 CWE-916
