Moderate CentOS ipa Security Update

Metadata

medium
4.0
ipa-3.0.0-50.el6.centos.2.src.rpm, ipa-4.2.0-15.0.1.el7.centos.19.src.rpm, ipa-admintools-3.0.0-50.el6.centos.2.i686.rpm, ipa-admintools-3.0.0-50.el6.centos.2.x86_64.rpm, ipa-admintools-4.2.0-15.0.1.el7.centos.19.x86_64.rpm, ipa-client-3.0.0-50.el6.centos.2.i686.rpm, ipa-client-3.0.0-50.el6.centos.2.x86_64.rpm, ipa-client-4.2.0-15.0.1.el7.centos.19.x86_64.rpm, ipa-python-3.0.0-50.el6.centos.2.i686.rpm, ipa-python-3.0.0-50.el6.centos.2.x86_64.rpm, ipa-python-4.2.0-15.0.1.el7.centos.19.x86_64.rpm, ipa-server-3.0.0-50.el6.centos.2.i686.rpm, ipa-server-3.0.0-50.el6.centos.2.x86_64.rpm, ipa-server-4.2.0-15.0.1.el7.centos.19.x86_64.rpm, ipa-server-dns-4.2.0-15.0.1.el7.centos.19.x86_64.rpm, ipa-server-selinux-3.0.0-50.el6.centos.2.i686.rpm, ipa-server-selinux-3.0.0-50.el6.centos.2.x86_64.rpm, ipa-server-trust-ad-3.0.0-50.el6.centos.2.i686.rpm, ipa-server-trust-ad-3.0.0-50.el6.centos.2.x86_64.rpm, ipa-server-trust-ad-4.2.0-15.0.1.el7.centos.19.x86_64.rpm
CVE-2016-5404
rhn.redhat.com, lists.centos.org, lists.centos.org
2016-09-05
2017-07-27 19:11
CVE-2016-5404 freeipa
CVE-2016-5404
2017-04-01 19:10
2017-01-05 20:14

Description


An update for ipa is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* An insufficient permission check issue was found in the way IPA server treats certificate revocation requests. An attacker logged in with the 'retrieve certificate' permission enabled could use this flaw to revoke certificates, possibly triggering a denial of service attack. (CVE-2016-5404)

This issue was discovered by Fraser Tweedale (Red Hat).
Please see https://www.redhat.com/footer/terms-of-use.html

Am I vulnerable?

The constraints below list the versions that this vulnerability is patched in, and versions that are unaffected. If a patch is ready but unrealeased, then it is pending.

Or, you can just let us figure it out for you! Appcanary continously monitor your installed packages, and tell you if any of them are vulnerable.

Sign up for monitoring

Affected package information

Release Package Patched in
6 ipa ipa-3.0.0-50.el6.centos.2.src.rpm
ipa-admintools ipa-admintools-3.0.0-50.el6.centos.2.i686.rpm
ipa-admintools ipa-admintools-3.0.0-50.el6.centos.2.x86_64.rpm
ipa-client ipa-client-3.0.0-50.el6.centos.2.i686.rpm
ipa-client ipa-client-3.0.0-50.el6.centos.2.x86_64.rpm
ipa-python ipa-python-3.0.0-50.el6.centos.2.x86_64.rpm
ipa-python ipa-python-3.0.0-50.el6.centos.2.i686.rpm
ipa-server ipa-server-3.0.0-50.el6.centos.2.x86_64.rpm
ipa-server ipa-server-3.0.0-50.el6.centos.2.i686.rpm
ipa-server-selinux ipa-server-selinux-3.0.0-50.el6.centos.2.i686.rpm
ipa-server-selinux ipa-server-selinux-3.0.0-50.el6.centos.2.x86_64.rpm
ipa-server-trust-ad ipa-server-trust-ad-3.0.0-50.el6.centos.2.x86_64.rpm
ipa-server-trust-ad ipa-server-trust-ad-3.0.0-50.el6.centos.2.i686.rpm
7 ipa ipa-4.2.0-15.0.1.el7.centos.19.src.rpm
ipa-admintools ipa-admintools-4.2.0-15.0.1.el7.centos.19.x86_64.rpm
ipa-client ipa-client-4.2.0-15.0.1.el7.centos.19.x86_64.rpm
ipa-python ipa-python-4.2.0-15.0.1.el7.centos.19.x86_64.rpm
ipa-server ipa-server-4.2.0-15.0.1.el7.centos.19.x86_64.rpm
ipa-server-dns ipa-server-dns-4.2.0-15.0.1.el7.centos.19.x86_64.rpm
ipa-server-trust-ad ipa-server-trust-ad-4.2.0-15.0.1.el7.centos.19.x86_64.rpm