ELSA-2021-0860

ELSA-2021-0860 - ipa security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2021-03-19

Description

[4.6.8-5.0.1]
- Blank out header-logo.png product-name.png
- Replace login-screen-logo.png [Orabug: 20362818]

[4.6.8-5.el7_9.4]
- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
- wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
- Improve PKI subsystem detection
- ipatests: add test for PKI subsystem detection
- ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
- Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
- fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
- CAless installation: set the perms on KDC cert file
- ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing elements to manipulation methods could result in untrusted code execution
- WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
- fix iPAddress cert issuance for >1 host/service

Related CVEs

CVE-2020-11023

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ipa-4.6.8-5.0.1.el7_9.4.src.rpm	117015614bc4e80e2394fe69bd1ef5309d7347885b3add216e084763b4a32b8c	ELSA-2024-3760	ol7_aarch64_latest
	ipa-4.6.8-5.0.1.el7_9.4.src.rpm	117015614bc4e80e2394fe69bd1ef5309d7347885b3add216e084763b4a32b8c	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-client-4.6.8-5.0.1.el7_9.4.aarch64.rpm	f09bb9f794debfd7aeb4ed188412b1872eb938b55d5046054201b7cd111d410d	ELSA-2024-3760	ol7_aarch64_latest
	ipa-client-4.6.8-5.0.1.el7_9.4.aarch64.rpm	f09bb9f794debfd7aeb4ed188412b1872eb938b55d5046054201b7cd111d410d	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-client-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	1027a8fc2b8b2ec8d979c8002570c45378211fd953210de6835b79f7a3ee49d1	ELSA-2024-3760	ol7_aarch64_latest
	ipa-client-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	1027a8fc2b8b2ec8d979c8002570c45378211fd953210de6835b79f7a3ee49d1	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	adb37f9adafd2ce16fa6980fd293139752051238c0f322ebfede7e8e9956e36e	ELSA-2024-3760	ol7_aarch64_latest
	ipa-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	adb37f9adafd2ce16fa6980fd293139752051238c0f322ebfede7e8e9956e36e	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-python-compat-4.6.8-5.0.1.el7_9.4.noarch.rpm	e325f2438a1d5ec51132159f7336295220b0a2e6c8b8edd0f2e32d9655f816bc	ELSA-2024-3760	ol7_aarch64_latest
	ipa-python-compat-4.6.8-5.0.1.el7_9.4.noarch.rpm	e325f2438a1d5ec51132159f7336295220b0a2e6c8b8edd0f2e32d9655f816bc	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-server-4.6.8-5.0.1.el7_9.4.aarch64.rpm	779c82813e356c9dbe0e65665bd5807d7f98b7948192f0bbdeb909475f6ee00a	ELSA-2024-3760	ol7_aarch64_latest
	ipa-server-4.6.8-5.0.1.el7_9.4.aarch64.rpm	779c82813e356c9dbe0e65665bd5807d7f98b7948192f0bbdeb909475f6ee00a	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-server-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	60dc0ea49ba4d41e107270c094b0215ed59271591c265a367d532d293ff08ce6	ELSA-2024-3760	ol7_aarch64_latest
	ipa-server-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	60dc0ea49ba4d41e107270c094b0215ed59271591c265a367d532d293ff08ce6	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-server-dns-4.6.8-5.0.1.el7_9.4.noarch.rpm	20f79bb43d330d928bb9fe483bbee8a9c7ff4a67fd0ef7538e8c56752640191a	ELSA-2024-3760	ol7_aarch64_latest
	ipa-server-dns-4.6.8-5.0.1.el7_9.4.noarch.rpm	20f79bb43d330d928bb9fe483bbee8a9c7ff4a67fd0ef7538e8c56752640191a	ELSA-2024-3760	ol7_aarch64_u9_patch
	ipa-server-trust-ad-4.6.8-5.0.1.el7_9.4.aarch64.rpm	e4437d98877fe1d7e75983827bc8d288b50e3aef945446c2dfe5ad004786ef94	ELSA-2024-3760	ol7_aarch64_latest
	ipa-server-trust-ad-4.6.8-5.0.1.el7_9.4.aarch64.rpm	e4437d98877fe1d7e75983827bc8d288b50e3aef945446c2dfe5ad004786ef94	ELSA-2024-3760	ol7_aarch64_u9_patch
	python2-ipaclient-4.6.8-5.0.1.el7_9.4.noarch.rpm	db62cf27b3a4c7850c0f9c2266728a58df63b58919a61401d551fdcf11702bf2	ELSA-2024-3760	ol7_aarch64_latest
	python2-ipaclient-4.6.8-5.0.1.el7_9.4.noarch.rpm	db62cf27b3a4c7850c0f9c2266728a58df63b58919a61401d551fdcf11702bf2	ELSA-2024-3760	ol7_aarch64_u9_patch
	python2-ipalib-4.6.8-5.0.1.el7_9.4.noarch.rpm	784f562b372d532329a07e93dc5955250e94bcf43c583acd502002b5a1c5db5d	ELSA-2024-3760	ol7_aarch64_latest
	python2-ipalib-4.6.8-5.0.1.el7_9.4.noarch.rpm	784f562b372d532329a07e93dc5955250e94bcf43c583acd502002b5a1c5db5d	ELSA-2024-3760	ol7_aarch64_u9_patch
	python2-ipaserver-4.6.8-5.0.1.el7_9.4.noarch.rpm	46ca940f57aff2f0d5759bbcba428de4153d4bf8bda3c0449562971eb98ecaab	ELSA-2024-3760	ol7_aarch64_latest
	python2-ipaserver-4.6.8-5.0.1.el7_9.4.noarch.rpm	46ca940f57aff2f0d5759bbcba428de4153d4bf8bda3c0449562971eb98ecaab	ELSA-2024-3760	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	ipa-4.6.8-5.0.1.el7_9.4.src.rpm	117015614bc4e80e2394fe69bd1ef5309d7347885b3add216e084763b4a32b8c	ELSA-2024-3760	ol7_x86_64_latest
	ipa-4.6.8-5.0.1.el7_9.4.src.rpm	117015614bc4e80e2394fe69bd1ef5309d7347885b3add216e084763b4a32b8c	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-client-4.6.8-5.0.1.el7_9.4.x86_64.rpm	3d863eaf4d4aa5b25cd32abacc256406ac28605b3cc8a0de0c12e1479050adb8	ELSA-2024-3760	ol7_x86_64_latest
	ipa-client-4.6.8-5.0.1.el7_9.4.x86_64.rpm	3d863eaf4d4aa5b25cd32abacc256406ac28605b3cc8a0de0c12e1479050adb8	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-client-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	1027a8fc2b8b2ec8d979c8002570c45378211fd953210de6835b79f7a3ee49d1	ELSA-2024-3760	ol7_x86_64_latest
	ipa-client-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	1027a8fc2b8b2ec8d979c8002570c45378211fd953210de6835b79f7a3ee49d1	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	adb37f9adafd2ce16fa6980fd293139752051238c0f322ebfede7e8e9956e36e	ELSA-2024-3760	ol7_x86_64_latest
	ipa-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	adb37f9adafd2ce16fa6980fd293139752051238c0f322ebfede7e8e9956e36e	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-python-compat-4.6.8-5.0.1.el7_9.4.noarch.rpm	e325f2438a1d5ec51132159f7336295220b0a2e6c8b8edd0f2e32d9655f816bc	ELSA-2024-3760	ol7_x86_64_latest
	ipa-python-compat-4.6.8-5.0.1.el7_9.4.noarch.rpm	e325f2438a1d5ec51132159f7336295220b0a2e6c8b8edd0f2e32d9655f816bc	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-server-4.6.8-5.0.1.el7_9.4.x86_64.rpm	b3c906ec8c6852c90b022db66b872f0bc7f8d7f20a935e62d5458ce96e3f2a35	ELSA-2024-3760	ol7_x86_64_latest
	ipa-server-4.6.8-5.0.1.el7_9.4.x86_64.rpm	b3c906ec8c6852c90b022db66b872f0bc7f8d7f20a935e62d5458ce96e3f2a35	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-server-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	60dc0ea49ba4d41e107270c094b0215ed59271591c265a367d532d293ff08ce6	ELSA-2024-3760	ol7_x86_64_latest
	ipa-server-common-4.6.8-5.0.1.el7_9.4.noarch.rpm	60dc0ea49ba4d41e107270c094b0215ed59271591c265a367d532d293ff08ce6	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-server-dns-4.6.8-5.0.1.el7_9.4.noarch.rpm	20f79bb43d330d928bb9fe483bbee8a9c7ff4a67fd0ef7538e8c56752640191a	ELSA-2024-3760	ol7_x86_64_latest
	ipa-server-dns-4.6.8-5.0.1.el7_9.4.noarch.rpm	20f79bb43d330d928bb9fe483bbee8a9c7ff4a67fd0ef7538e8c56752640191a	ELSA-2024-3760	ol7_x86_64_u9_patch
	ipa-server-trust-ad-4.6.8-5.0.1.el7_9.4.x86_64.rpm	9b7455c8794b95f13999e8729feda3c022b4d042854402e5d526ffff4d08d19d	ELSA-2024-3760	ol7_x86_64_latest
	ipa-server-trust-ad-4.6.8-5.0.1.el7_9.4.x86_64.rpm	9b7455c8794b95f13999e8729feda3c022b4d042854402e5d526ffff4d08d19d	ELSA-2024-3760	ol7_x86_64_u9_patch
	python2-ipaclient-4.6.8-5.0.1.el7_9.4.noarch.rpm	db62cf27b3a4c7850c0f9c2266728a58df63b58919a61401d551fdcf11702bf2	ELSA-2024-3760	ol7_x86_64_latest
	python2-ipaclient-4.6.8-5.0.1.el7_9.4.noarch.rpm	db62cf27b3a4c7850c0f9c2266728a58df63b58919a61401d551fdcf11702bf2	ELSA-2024-3760	ol7_x86_64_u9_patch
	python2-ipalib-4.6.8-5.0.1.el7_9.4.noarch.rpm	784f562b372d532329a07e93dc5955250e94bcf43c583acd502002b5a1c5db5d	ELSA-2024-3760	ol7_x86_64_latest
	python2-ipalib-4.6.8-5.0.1.el7_9.4.noarch.rpm	784f562b372d532329a07e93dc5955250e94bcf43c583acd502002b5a1c5db5d	ELSA-2024-3760	ol7_x86_64_u9_patch
	python2-ipaserver-4.6.8-5.0.1.el7_9.4.noarch.rpm	46ca940f57aff2f0d5759bbcba428de4153d4bf8bda3c0449562971eb98ecaab	ELSA-2024-3760	ol7_x86_64_latest
	python2-ipaserver-4.6.8-5.0.1.el7_9.4.noarch.rpm	46ca940f57aff2f0d5759bbcba428de4153d4bf8bda3c0449562971eb98ecaab	ELSA-2024-3760	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team