ELSA-2017-0388

ELSA-2017-0388 - ipa security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-03-02

Description

[4.4.0-14.0.1.el7_3.6]
- Blank out header-logo.png product-name.png
Replace login-screen-logo.png [20362818]

[4.4.0-14.6]
- Resolves: #1416488 replication race condition prevents IPA to install
- wait_for_entry: use only DN as parameter
- Wait until HTTPS principal entry is replicated to replica
- Use proper logging for error messages

[4.4.0-14.5]
- Resolves: #1410760 ipa-ca-install fails on replica when IPA Master is
installed without CA
- Set up DS TLS on replica in CA-less topology
- Resolves: #1413137 CVE-2017-2590 ipa: Insufficient permission check for
ca-del, ca-disable and ca-enable commands
- ca: correctly authorise ca-del, ca-enable and ca-disable
- Resolves: #1416481 IPA replica install fails with dirsrv errors.
- Do not configure PKI ajp redirection to use '::1'

Related CVEs

CVE-2017-2590

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	ipa-4.4.0-14.0.1.el7_3.6.src.rpm	303c340bad4c887ffe5b63e0166cf3bdfad636c487944f6a026791fd15a4c67b	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-4.4.0-14.0.1.el7_3.6.src.rpm	303c340bad4c887ffe5b63e0166cf3bdfad636c487944f6a026791fd15a4c67b	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-admintools-4.4.0-14.0.1.el7_3.6.noarch.rpm	523cce9d8df5bd90cac57246d6250fd2f9c5d4e70831bf0445a273142991f8dc	ELBA-2017-0925	ol7_x86_64_latest_archive
	ipa-admintools-4.4.0-14.0.1.el7_3.6.noarch.rpm	523cce9d8df5bd90cac57246d6250fd2f9c5d4e70831bf0445a273142991f8dc	ELBA-2017-0925	ol7_x86_64_u3_patch
	ipa-client-4.4.0-14.0.1.el7_3.6.x86_64.rpm	69dda13dfb0ba98aa252cb274864fe5da2f991d6193e3775c944057cda7c7ba7	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-client-4.4.0-14.0.1.el7_3.6.x86_64.rpm	69dda13dfb0ba98aa252cb274864fe5da2f991d6193e3775c944057cda7c7ba7	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-client-common-4.4.0-14.0.1.el7_3.6.noarch.rpm	97d4fcc19221f0ce42e18a411eb345ba72d1358c4b48091205c323ada9932fcb	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-client-common-4.4.0-14.0.1.el7_3.6.noarch.rpm	97d4fcc19221f0ce42e18a411eb345ba72d1358c4b48091205c323ada9932fcb	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-common-4.4.0-14.0.1.el7_3.6.noarch.rpm	c6a06e1ebd64eb0b3ec4f4cab939470c9aa19506508f9d6d4ad90d8a96568c27	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-common-4.4.0-14.0.1.el7_3.6.noarch.rpm	c6a06e1ebd64eb0b3ec4f4cab939470c9aa19506508f9d6d4ad90d8a96568c27	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-python-compat-4.4.0-14.0.1.el7_3.6.noarch.rpm	06265df4ad91d6e41d895478210f19b9b8de1e9b0fbba9d9993bc4da92b38e24	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-python-compat-4.4.0-14.0.1.el7_3.6.noarch.rpm	06265df4ad91d6e41d895478210f19b9b8de1e9b0fbba9d9993bc4da92b38e24	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-server-4.4.0-14.0.1.el7_3.6.x86_64.rpm	d4d9f18358bf360e2c1f7ea6820bb55725338a2cbfc99676a886a0093667c628	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-server-4.4.0-14.0.1.el7_3.6.x86_64.rpm	d4d9f18358bf360e2c1f7ea6820bb55725338a2cbfc99676a886a0093667c628	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-server-common-4.4.0-14.0.1.el7_3.6.noarch.rpm	598387122d8c081d1db380b5a2a3505dfa70ed273b8020f578d53806e140b153	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-server-common-4.4.0-14.0.1.el7_3.6.noarch.rpm	598387122d8c081d1db380b5a2a3505dfa70ed273b8020f578d53806e140b153	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-server-dns-4.4.0-14.0.1.el7_3.6.noarch.rpm	886e99853e9908054f5909aea86c3bb4d41bb6cd5f1edf271e74d6b1561ed228	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-server-dns-4.4.0-14.0.1.el7_3.6.noarch.rpm	886e99853e9908054f5909aea86c3bb4d41bb6cd5f1edf271e74d6b1561ed228	ELSA-2024-3760	ol7_x86_64_u3_patch
	ipa-server-trust-ad-4.4.0-14.0.1.el7_3.6.x86_64.rpm	36c98614fe83f835f15bf1f3c0dd42711a7c80c6da3307ab6096208a5b442871	ELSA-2024-3760	ol7_x86_64_latest_archive
	ipa-server-trust-ad-4.4.0-14.0.1.el7_3.6.x86_64.rpm	36c98614fe83f835f15bf1f3c0dd42711a7c80c6da3307ab6096208a5b442871	ELSA-2024-3760	ol7_x86_64_u3_patch
	python2-ipaclient-4.4.0-14.0.1.el7_3.6.noarch.rpm	b247a1a422eeb104d447382035349f99719d8b075cab365388147afbedf53863	ELSA-2024-3760	ol7_x86_64_latest_archive
	python2-ipaclient-4.4.0-14.0.1.el7_3.6.noarch.rpm	b247a1a422eeb104d447382035349f99719d8b075cab365388147afbedf53863	ELSA-2024-3760	ol7_x86_64_u3_patch
	python2-ipalib-4.4.0-14.0.1.el7_3.6.noarch.rpm	6201f6643b466d129461775711ea69fcd20d1e159c2dae9719a5fa8dd38f9025	ELSA-2024-3760	ol7_x86_64_latest_archive
	python2-ipalib-4.4.0-14.0.1.el7_3.6.noarch.rpm	6201f6643b466d129461775711ea69fcd20d1e159c2dae9719a5fa8dd38f9025	ELSA-2024-3760	ol7_x86_64_u3_patch
	python2-ipaserver-4.4.0-14.0.1.el7_3.6.noarch.rpm	697304b98414c42fdf887c525cb01bfab024fefa07cc2e75d0719775181736d1	ELSA-2024-3760	ol7_x86_64_latest_archive
	python2-ipaserver-4.4.0-14.0.1.el7_3.6.noarch.rpm	697304b98414c42fdf887c525cb01bfab024fefa07cc2e75d0719775181736d1	ELSA-2024-3760	ol7_x86_64_u3_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team