ELSA-2021-5195

ELSA-2021-5195 - ipa security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2021-12-17

Description

[4.6.8-5.0.1]
- Blank out header-logo.png product-name.png
- Replace login-screen-logo.png [Orabug: 20362818]

[4.6.8-5.el7_9.10]
- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server
- Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
- SMB: switch IPA domain controller role

Related CVEs

CVE-2020-25719

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	ipa-4.6.8-5.0.1.el7_9.10.src.rpm	b0f8e62e7afc8baf8a6fcfd7de4eb02e	-
	ipa-client-4.6.8-5.0.1.el7_9.10.aarch64.rpm	9b0ad384c48e82dec0b93df8829be9cf	-
	ipa-client-common-4.6.8-5.0.1.el7_9.10.noarch.rpm	756759a8b0b431edc82472f26c789e6a	-
	ipa-common-4.6.8-5.0.1.el7_9.10.noarch.rpm	a11f7aad284daf7c72a4a4c75918aae4	-
	ipa-python-compat-4.6.8-5.0.1.el7_9.10.noarch.rpm	76f96f7bdbdae5b917e40bd6c90d2e4e	-
	ipa-server-4.6.8-5.0.1.el7_9.10.aarch64.rpm	893c55cf8233962bde8d5077ef640bc4	-
	ipa-server-common-4.6.8-5.0.1.el7_9.10.noarch.rpm	8bc55b20d2a2397de15619c2dc0c7c25	-
	ipa-server-dns-4.6.8-5.0.1.el7_9.10.noarch.rpm	7af1620108d3c83a856dcfa6147ba995	-
	ipa-server-trust-ad-4.6.8-5.0.1.el7_9.10.aarch64.rpm	21f3b9ed9530503e21b0385a6fd8c337	-
	python2-ipaclient-4.6.8-5.0.1.el7_9.10.noarch.rpm	9d402afc2ce5d08ec402d9b47a1d3bff	-
	python2-ipalib-4.6.8-5.0.1.el7_9.10.noarch.rpm	f2981bac5445f2bd2085dabb73bae847	-
	python2-ipaserver-4.6.8-5.0.1.el7_9.10.noarch.rpm	50a34a796c65f499bb712d144d2cbf68	-
Oracle Linux 7 (x86_64)	ipa-4.6.8-5.0.1.el7_9.10.src.rpm	b0f8e62e7afc8baf8a6fcfd7de4eb02e	-
	ipa-client-4.6.8-5.0.1.el7_9.10.x86_64.rpm	bf1221f3c476e0bf1039b9859be7f7d0	-
	ipa-client-common-4.6.8-5.0.1.el7_9.10.noarch.rpm	756759a8b0b431edc82472f26c789e6a	-
	ipa-common-4.6.8-5.0.1.el7_9.10.noarch.rpm	a11f7aad284daf7c72a4a4c75918aae4	-
	ipa-python-compat-4.6.8-5.0.1.el7_9.10.noarch.rpm	76f96f7bdbdae5b917e40bd6c90d2e4e	-
	ipa-server-4.6.8-5.0.1.el7_9.10.x86_64.rpm	d8642636a6594d13dda6272a49f04b0a	-
	ipa-server-common-4.6.8-5.0.1.el7_9.10.noarch.rpm	8bc55b20d2a2397de15619c2dc0c7c25	-
	ipa-server-dns-4.6.8-5.0.1.el7_9.10.noarch.rpm	7af1620108d3c83a856dcfa6147ba995	-
	ipa-server-trust-ad-4.6.8-5.0.1.el7_9.10.x86_64.rpm	0b01e12f43d77d59341c1407ab4438c8	-
	python2-ipaclient-4.6.8-5.0.1.el7_9.10.noarch.rpm	9d402afc2ce5d08ec402d9b47a1d3bff	-
	python2-ipalib-4.6.8-5.0.1.el7_9.10.noarch.rpm	f2981bac5445f2bd2085dabb73bae847	-
	python2-ipaserver-4.6.8-5.0.1.el7_9.10.noarch.rpm	50a34a796c65f499bb712d144d2cbf68	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team