ELSA-2025-0334

ELSA-2025-0334 - ipa security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-01-15

Description

[4.12.2-1.0.1.3]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
- Add bind to ipa-server-common Requires [Orabug: 36518596]

[4.12.2-1.3]
- Resolves: RHEL-69928 add support for python cryptography 44.0.0
- Resolves: RHEL-70258 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
- Resolves: RHEL-70482 ipa-server-upgrade fails after established trust with ad
- Resolves: RHEL-67192 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal

Related CVEs

CVE-2024-11029

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	0b3d69b9094428e418171245cc5ea2c4cacce0ae40065a5845dc6d6a66db2bea	-	ol9_aarch64_appstream
	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	0b3d69b9094428e418171245cc5ea2c4cacce0ae40065a5845dc6d6a66db2bea	-	ol9_aarch64_codeready_builder
	ipa-client-4.12.2-1.0.1.el9_5.3.aarch64.rpm	9c21c77cd1f20dcf50d72b1534e3ba48e5e91adbd71fa6329b5eb666b70c3601	-	ol9_aarch64_appstream
	ipa-client-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	4ec3fe8e594f143ae308b76d0ab9879d0e2bd87df015da57a975a3a9a8ca5c8d	-	ol9_aarch64_appstream
	ipa-client-epn-4.12.2-1.0.1.el9_5.3.aarch64.rpm	48849708171e5297f25628ff75392700fad511335651516758d0f5a8373e1be3	-	ol9_aarch64_appstream
	ipa-client-samba-4.12.2-1.0.1.el9_5.3.aarch64.rpm	47522eae3e9e7e92aeceeb67314638c369bed687ae95b4b5d06f46863f271d9f	-	ol9_aarch64_appstream
	ipa-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	bf8be10eda8023eb955347195c7841634c397e00c2d13dd8f1da7decaf0309a1	-	ol9_aarch64_appstream
	ipa-selinux-4.12.2-1.0.1.el9_5.3.noarch.rpm	93b3e2a2b27bface63e9835efc715b717295549b05717174018b0661763c9cd7	-	ol9_aarch64_appstream
	ipa-selinux-luna-4.12.2-1.0.1.el9_5.3.noarch.rpm	a7ef66ab8d1369fb0b2692272b158d3fc297e0674d45a5b0918a015778199e99	-	ol9_aarch64_appstream
	ipa-selinux-nfast-4.12.2-1.0.1.el9_5.3.noarch.rpm	97582a7435e4adfdaa535ccafee9bd19f6e9e470747312c46a43f64a563bbff9	-	ol9_aarch64_appstream
	ipa-server-4.12.2-1.0.1.el9_5.3.aarch64.rpm	bdb2a7ed185baf0b81c67aa6afd9125b6ea27c2a4ea3a29d215789d2aae91d72	-	ol9_aarch64_appstream
	ipa-server-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	bc3eda2573c0835e954879c524e504161b5127d64042b17b5fd970d381b73f69	-	ol9_aarch64_appstream
	ipa-server-dns-4.12.2-1.0.1.el9_5.3.noarch.rpm	d60d3e4ae9a58fc879043294a6ebb092a2305cdc6dea3d66801cc6c07c6c319c	-	ol9_aarch64_appstream
	ipa-server-trust-ad-4.12.2-1.0.1.el9_5.3.aarch64.rpm	d21e8ed2f1966d3b725453fce16a7d2fef4511e545c35be39b844fbad45b56e3	-	ol9_aarch64_appstream
	python3-ipaclient-4.12.2-1.0.1.el9_5.3.noarch.rpm	c2f1bc902413a52079a505dca6f48fe4872f9e0225c87209c690e2b4e406faf9	-	ol9_aarch64_appstream
	python3-ipalib-4.12.2-1.0.1.el9_5.3.noarch.rpm	22159b604765a91ea96327ee06af2f742835971cee5bdb16058c1cd8332048ed	-	ol9_aarch64_appstream
	python3-ipaserver-4.12.2-1.0.1.el9_5.3.noarch.rpm	f25a7b407bfd3c09c486a7f5552d563cbd0e243080dfa2cbbf191d1d06ab61a2	-	ol9_aarch64_appstream
	python3-ipatests-4.12.2-1.0.1.el9_5.3.noarch.rpm	9f0447f225eb7b43585be0b6917071d2ca52f312460a905b1e557d54d6f6274d	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	0b3d69b9094428e418171245cc5ea2c4cacce0ae40065a5845dc6d6a66db2bea	-	ol9_x86_64_appstream
	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	0b3d69b9094428e418171245cc5ea2c4cacce0ae40065a5845dc6d6a66db2bea	-	ol9_x86_64_codeready_builder
	ipa-client-4.12.2-1.0.1.el9_5.3.x86_64.rpm	a8e3f89afce3cec30c84bfcf082eacf7b573499759ed62081077223f7baa3d9e	-	ol9_x86_64_appstream
	ipa-client-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	4ec3fe8e594f143ae308b76d0ab9879d0e2bd87df015da57a975a3a9a8ca5c8d	-	ol9_x86_64_appstream
	ipa-client-epn-4.12.2-1.0.1.el9_5.3.x86_64.rpm	a255a42e067769a2f0347d1ac204439d757c8621092abb02269323842d296179	-	ol9_x86_64_appstream
	ipa-client-samba-4.12.2-1.0.1.el9_5.3.x86_64.rpm	2f59b696fac7227817759c4488410235f57acea9b85d89a0b18f0f7c4dc4e565	-	ol9_x86_64_appstream
	ipa-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	bf8be10eda8023eb955347195c7841634c397e00c2d13dd8f1da7decaf0309a1	-	ol9_x86_64_appstream
	ipa-selinux-4.12.2-1.0.1.el9_5.3.noarch.rpm	93b3e2a2b27bface63e9835efc715b717295549b05717174018b0661763c9cd7	-	ol9_x86_64_appstream
	ipa-selinux-luna-4.12.2-1.0.1.el9_5.3.noarch.rpm	a7ef66ab8d1369fb0b2692272b158d3fc297e0674d45a5b0918a015778199e99	-	ol9_x86_64_appstream
	ipa-selinux-nfast-4.12.2-1.0.1.el9_5.3.noarch.rpm	97582a7435e4adfdaa535ccafee9bd19f6e9e470747312c46a43f64a563bbff9	-	ol9_x86_64_appstream
	ipa-server-4.12.2-1.0.1.el9_5.3.x86_64.rpm	293396f73c22fbac30e42c0d9c231ffdaccd2fce0bcf837a0e41b1017a32032f	-	ol9_x86_64_appstream
	ipa-server-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	bc3eda2573c0835e954879c524e504161b5127d64042b17b5fd970d381b73f69	-	ol9_x86_64_appstream
	ipa-server-dns-4.12.2-1.0.1.el9_5.3.noarch.rpm	d60d3e4ae9a58fc879043294a6ebb092a2305cdc6dea3d66801cc6c07c6c319c	-	ol9_x86_64_appstream
	ipa-server-trust-ad-4.12.2-1.0.1.el9_5.3.x86_64.rpm	052be0be2f1c89fb6c6b45e2eebe3882459cfaf903cabc99de6b7885752501b3	-	ol9_x86_64_appstream
	python3-ipaclient-4.12.2-1.0.1.el9_5.3.noarch.rpm	c2f1bc902413a52079a505dca6f48fe4872f9e0225c87209c690e2b4e406faf9	-	ol9_x86_64_appstream
	python3-ipalib-4.12.2-1.0.1.el9_5.3.noarch.rpm	22159b604765a91ea96327ee06af2f742835971cee5bdb16058c1cd8332048ed	-	ol9_x86_64_appstream
	python3-ipaserver-4.12.2-1.0.1.el9_5.3.noarch.rpm	f25a7b407bfd3c09c486a7f5552d563cbd0e243080dfa2cbbf191d1d06ab61a2	-	ol9_x86_64_appstream
	python3-ipatests-4.12.2-1.0.1.el9_5.3.noarch.rpm	9f0447f225eb7b43585be0b6917071d2ca52f312460a905b1e557d54d6f6274d	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team