ELSA-2015-1462

ELSA-2015-1462 - ipa security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2015-07-28

Description

[3.0.0-47.el6]
- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant

[3.0.0-46.el6]
- Use tls version range in NSSHTTPS initialization
- Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA
client and server
- Resolves: #1012224 - host certificate not issued to client during
ipa-client-install

[3.0.0-45.el6]
- Resolves: #1205660 - ipa-client rpm should require keyutils

[3.0.0-44.el6]
- Release 3.0.0-44
- Resolves: #1201454 - ipa breaks sshd config

[3.0.0-43.el6]
- Release 3.0.0-43
- Resolves: #1191040 - ipa-client-automount: failing with error LDAP server
returned UNWILLING_TO_PERFORM. This likely means that
minssf is enabled.
- Resolves: #1185207 - ipa-client dont end new line character in
/etc/nsswitch.conf
- Resolves: #1166241 - CVE-2010-5312 CVE-2012-6662 ipa: various flaws
- Resolves: #1161722 - IDM client registration failure in a high load
environment
- Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA
client and server
- Resolves: #1146870 - ipa-client-install fails with 'KerbTransport instance
has no attribute '__conn'' traceback
- Resolves: #1132261 - ipa-client-install failing produces a traceback
instead of useful error message
- Resolves: #1131571 - Do not allow IdM server/replica/client installation
in a FIPS-140 mode
- Resolves: #1198160 - /usr/sbin/ipa-server-install --uninstall does not
clean /var/lib/ipa/pki-ca
- Resolves: #1198339 - ipa-client-install adds extra sss to sudoers in
nsswitch.conf
- Require: 389-ds-base >= 1.2.11.15-51
- Require: mod_nss >= 1.0.10
- Require: pki-ca >= 9.0.3-40
- Require: python-nss >= 0.16

Related CVEs

CVE-2012-6662

CVE-2010-5312

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	ipa-3.0.0-47.el6.src.rpm	c33052dd668c3863be9c634dae0c28515bfb9a08d142287e94d4040a8aabaa25	ELBA-2019-4569	ol6_i386_latest_archive
	ipa-3.0.0-47.el6.src.rpm	c33052dd668c3863be9c634dae0c28515bfb9a08d142287e94d4040a8aabaa25	ELBA-2019-4569	ol6_u7_i386_base
	ipa-admintools-3.0.0-47.el6.i686.rpm	0a454442fdf9af2e19726c0ae3b746dfd126d9b401acb84f7e79b4178e688664	ELBA-2019-4569	ol6_i386_latest_archive
	ipa-admintools-3.0.0-47.el6.i686.rpm	0a454442fdf9af2e19726c0ae3b746dfd126d9b401acb84f7e79b4178e688664	ELBA-2019-4569	ol6_u7_i386_base
	ipa-client-3.0.0-47.el6.i686.rpm	e7a71331a750d4399f36d375364be618d1a63e1aadb88eb89358dd1c07a011a9	ELBA-2019-4569	ol6_i386_latest_archive
	ipa-client-3.0.0-47.el6.i686.rpm	e7a71331a750d4399f36d375364be618d1a63e1aadb88eb89358dd1c07a011a9	ELBA-2019-4569	ol6_u7_i386_base
	ipa-python-3.0.0-47.el6.i686.rpm	2205680086217b99c43690a79e960e73cb11b40049561fca847232069f9997a5	ELBA-2019-4569	ol6_i386_latest_archive
	ipa-python-3.0.0-47.el6.i686.rpm	2205680086217b99c43690a79e960e73cb11b40049561fca847232069f9997a5	ELBA-2019-4569	ol6_u7_i386_base
	ipa-server-3.0.0-47.el6.i686.rpm	54c294d4f887802fbc4d43d18b45e6a97c8e5132c1fed5281452c615f47fb16a	ELBA-2019-4569	ol6_i386_latest_archive
	ipa-server-3.0.0-47.el6.i686.rpm	54c294d4f887802fbc4d43d18b45e6a97c8e5132c1fed5281452c615f47fb16a	ELBA-2019-4569	ol6_u7_i386_base
	ipa-server-selinux-3.0.0-47.el6.i686.rpm	7577bcd45bc8d123cbe4ce12a12634079ad23fe71064043fbbe869dc14769bde	ELBA-2019-4569	ol6_i386_latest_archive
	ipa-server-selinux-3.0.0-47.el6.i686.rpm	7577bcd45bc8d123cbe4ce12a12634079ad23fe71064043fbbe869dc14769bde	ELBA-2019-4569	ol6_u7_i386_base
	ipa-server-trust-ad-3.0.0-47.el6.i686.rpm	245d5df8c7ca2b5a0b386db523ef94d5bb9445a0897bd02534282456bbf81cb8	ELBA-2019-4569	ol6_i386_latest_archive
	ipa-server-trust-ad-3.0.0-47.el6.i686.rpm	245d5df8c7ca2b5a0b386db523ef94d5bb9445a0897bd02534282456bbf81cb8	ELBA-2019-4569	ol6_u7_i386_base
Oracle Linux 6 (x86_64)	ipa-3.0.0-47.el6.src.rpm	c33052dd668c3863be9c634dae0c28515bfb9a08d142287e94d4040a8aabaa25	ELBA-2019-4569	ol6_u7_x86_64_base
	ipa-3.0.0-47.el6.src.rpm	c33052dd668c3863be9c634dae0c28515bfb9a08d142287e94d4040a8aabaa25	ELBA-2019-4569	ol6_x86_64_latest_archive
	ipa-admintools-3.0.0-47.el6.x86_64.rpm	ce54ecb0c31303ab58e1a42cf0bb21e152072c78398f0ffda2d95cd724ee43ec	ELBA-2019-4569	ol6_u7_x86_64_base
	ipa-admintools-3.0.0-47.el6.x86_64.rpm	ce54ecb0c31303ab58e1a42cf0bb21e152072c78398f0ffda2d95cd724ee43ec	ELBA-2019-4569	ol6_x86_64_latest_archive
	ipa-client-3.0.0-47.el6.x86_64.rpm	d93f00482a19a2d9733b7f11e8a8ed5f55f41b1f274b712ce0ae927a7c306ceb	ELBA-2019-4569	ol6_u7_x86_64_base
	ipa-client-3.0.0-47.el6.x86_64.rpm	d93f00482a19a2d9733b7f11e8a8ed5f55f41b1f274b712ce0ae927a7c306ceb	ELBA-2019-4569	ol6_x86_64_latest_archive
	ipa-python-3.0.0-47.el6.x86_64.rpm	ca61cc2d7fddefb70883203b1116fb5432c6f6171b012f383b4ceae446b687eb	ELBA-2019-4569	ol6_u7_x86_64_base
	ipa-python-3.0.0-47.el6.x86_64.rpm	ca61cc2d7fddefb70883203b1116fb5432c6f6171b012f383b4ceae446b687eb	ELBA-2019-4569	ol6_x86_64_latest_archive
	ipa-server-3.0.0-47.el6.x86_64.rpm	e777d377770483106782fbd82edc6285b78ccb5f90d07b6b6fd184b1d597eaf0	ELBA-2019-4569	ol6_u7_x86_64_base
	ipa-server-3.0.0-47.el6.x86_64.rpm	e777d377770483106782fbd82edc6285b78ccb5f90d07b6b6fd184b1d597eaf0	ELBA-2019-4569	ol6_x86_64_latest_archive
	ipa-server-selinux-3.0.0-47.el6.x86_64.rpm	4a65726b8997ae5075bfd47319c7a221ec427dd72736ac79a53144cafe9a9936	ELBA-2019-4569	ol6_u7_x86_64_base
	ipa-server-selinux-3.0.0-47.el6.x86_64.rpm	4a65726b8997ae5075bfd47319c7a221ec427dd72736ac79a53144cafe9a9936	ELBA-2019-4569	ol6_x86_64_latest_archive
	ipa-server-trust-ad-3.0.0-47.el6.x86_64.rpm	538cccf5d0c5b87038f17cf0013eca6d27be2da141473e2868f83686f7b1f697	ELBA-2019-4569	ol6_u7_x86_64_base
	ipa-server-trust-ad-3.0.0-47.el6.x86_64.rpm	538cccf5d0c5b87038f17cf0013eca6d27be2da141473e2868f83686f7b1f697	ELBA-2019-4569	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team