Low CentOS ipa Update


ipa-3.0.0-25.el6.src.rpm, ipa-admintools-3.0.0-25.el6.i686.rpm, ipa-admintools-3.0.0-25.el6.x86_64.rpm, ipa-client-3.0.0-25.el6.i686.rpm, ipa-client-3.0.0-25.el6.x86_64.rpm, ipa-python-3.0.0-25.el6.i686.rpm, ipa-python-3.0.0-25.el6.x86_64.rpm, ipa-server-3.0.0-25.el6.i686.rpm, ipa-server-3.0.0-25.el6.x86_64.rpm, ipa-server-selinux-3.0.0-25.el6.i686.rpm, ipa-server-selinux-3.0.0-25.el6.x86_64.rpm, ipa-server-trust-ad-3.0.0-25.el6.i686.rpm, ipa-server-trust-ad-3.0.0-25.el6.x86_64.rpm
rhn.redhat.com, lists.centos.org, lists.centos.org
2017-07-27 19:05
2017-04-01 19:06
2017-01-05 20:10


Updated ipa packages that fix one security issue, several bugs, and add
various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Red Hat Identity Management is a centralized authentication, identity
management and authorization solution for both traditional and cloud-based
enterprise environments. It integrates components of the Red Hat Directory
Server, MIT Kerberos, Red Hat Certificate System, NTP, and DNS. It provides
web browser and command-line interfaces. Its administration tools allow an
administrator to quickly install, set up, and administer a group of domain
controllers to meet the authentication and identity management requirements
of large-scale Linux and UNIX deployments.

It was found that the current default configuration of IPA servers did not
publish correct CRLs (Certificate Revocation Lists). The default
configuration specifies that every replica is to generate its own CRL;
however, this can result in inconsistencies in the CRL contents provided to
clients from different Identity Management replicas. More specifically, if
a certificate is revoked on one Identity Management replica, it will not
show up on another Identity Management replica. (CVE-2012-4546)

These updated ipa packages also include numerous bug fixes and
enhancements. Space precludes documenting all of these changes in this
advisory. Users are directed to the Red Hat Enterprise Linux 6.4 Technical
Notes, linked to in the References, for information on the most significant
of these changes.

Users are advised to upgrade to these updated ipa packages, which fix these
issues and add these enhancements.
Please see https://www.redhat.com/footer/terms-of-use.html

Am I vulnerable?

The constraints below list the versions that this vulnerability is patched in, and versions that are unaffected. If a patch is ready but unrealeased, then it is pending.

Or, you can just let us figure it out for you! Appcanary continously monitor your installed packages, and tell you if any of them are vulnerable.

Sign up for monitoring

Affected package information

Release Package Patched in
6 ipa ipa-3.0.0-25.el6.src.rpm
ipa-admintools ipa-admintools-3.0.0-25.el6.i686.rpm
ipa-admintools ipa-admintools-3.0.0-25.el6.x86_64.rpm
ipa-client ipa-client-3.0.0-25.el6.i686.rpm
ipa-client ipa-client-3.0.0-25.el6.x86_64.rpm
ipa-python ipa-python-3.0.0-25.el6.i686.rpm
ipa-python ipa-python-3.0.0-25.el6.x86_64.rpm
ipa-server ipa-server-3.0.0-25.el6.i686.rpm
ipa-server ipa-server-3.0.0-25.el6.x86_64.rpm
ipa-server-selinux ipa-server-selinux-3.0.0-25.el6.i686.rpm
ipa-server-selinux ipa-server-selinux-3.0.0-25.el6.x86_64.rpm
ipa-server-trust-ad ipa-server-trust-ad-3.0.0-25.el6.i686.rpm
ipa-server-trust-ad ipa-server-trust-ad-3.0.0-25.el6.x86_64.rpm