ELSA-2025-0334

ELSA-2025-0334 - ipa security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2025-01-15

Description

[4.12.2-1.0.1.3]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
- Add bind to ipa-server-common Requires [Orabug: 36518596]

[4.12.2-1.3]
- Resolves: RHEL-69928 add support for python cryptography 44.0.0
- Resolves: RHEL-70258 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
- Resolves: RHEL-70482 ipa-server-upgrade fails after established trust with ad
- Resolves: RHEL-67192 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal

Related CVEs

CVE-2024-11029

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	13d56b2c399110ed6aab60145e328b94	-	ol9_aarch64_appstream
	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	13d56b2c399110ed6aab60145e328b94	-	ol9_aarch64_codeready_builder
	ipa-client-4.12.2-1.0.1.el9_5.3.aarch64.rpm	3e9035f8a6bbeab7e379354b624f0dad	-	ol9_aarch64_appstream
	ipa-client-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	12490ae7ef57c783206c5de9762e6f47	-	ol9_aarch64_appstream
	ipa-client-epn-4.12.2-1.0.1.el9_5.3.aarch64.rpm	4c229e53fa588644a3c4936eb87ed7f8	-	ol9_aarch64_appstream
	ipa-client-samba-4.12.2-1.0.1.el9_5.3.aarch64.rpm	0999f0c1e5166aac94e86e4345c43923	-	ol9_aarch64_appstream
	ipa-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	338a5836de5d8636c1bc61413c9e9cc6	-	ol9_aarch64_appstream
	ipa-selinux-4.12.2-1.0.1.el9_5.3.noarch.rpm	07353186e6247db0876ec9186217d702	-	ol9_aarch64_appstream
	ipa-selinux-luna-4.12.2-1.0.1.el9_5.3.noarch.rpm	31d31221102a0dceb58de71b22b598d9	-	ol9_aarch64_appstream
	ipa-selinux-nfast-4.12.2-1.0.1.el9_5.3.noarch.rpm	cdffba0373beddbbe97fcc0871a4828c	-	ol9_aarch64_appstream
	ipa-server-4.12.2-1.0.1.el9_5.3.aarch64.rpm	7a9a3963c4a26109e2c15ee6412560dc	-	ol9_aarch64_appstream
	ipa-server-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	67207570ad60a92988bbac4b946ba8ac	-	ol9_aarch64_appstream
	ipa-server-dns-4.12.2-1.0.1.el9_5.3.noarch.rpm	b00b4acb4a659bed720223bd859e7055	-	ol9_aarch64_appstream
	ipa-server-trust-ad-4.12.2-1.0.1.el9_5.3.aarch64.rpm	a6a4f463b82fdb744857db7437eed6f4	-	ol9_aarch64_appstream
	python3-ipaclient-4.12.2-1.0.1.el9_5.3.noarch.rpm	55a7d762f679d6db363240b0da3fdb1f	-	ol9_aarch64_appstream
	python3-ipalib-4.12.2-1.0.1.el9_5.3.noarch.rpm	714cbb2c07e1e881a3c8140abcbb14e8	-	ol9_aarch64_appstream
	python3-ipaserver-4.12.2-1.0.1.el9_5.3.noarch.rpm	3364cdd2dce77f684c67fca46d6f38b7	-	ol9_aarch64_appstream
	python3-ipatests-4.12.2-1.0.1.el9_5.3.noarch.rpm	7fff5227d2a6f2e4ff8e893a9ee9ce79	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	13d56b2c399110ed6aab60145e328b94	-	ol9_x86_64_appstream
	ipa-4.12.2-1.0.1.el9_5.3.src.rpm	13d56b2c399110ed6aab60145e328b94	-	ol9_x86_64_codeready_builder
	ipa-client-4.12.2-1.0.1.el9_5.3.x86_64.rpm	442650642d4b122278c5f04522d8f763	-	ol9_x86_64_appstream
	ipa-client-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	12490ae7ef57c783206c5de9762e6f47	-	ol9_x86_64_appstream
	ipa-client-epn-4.12.2-1.0.1.el9_5.3.x86_64.rpm	1f36745d01b25af25d876272de6857eb	-	ol9_x86_64_appstream
	ipa-client-samba-4.12.2-1.0.1.el9_5.3.x86_64.rpm	6eac3fce4f026bed48dc32fd40fa2b67	-	ol9_x86_64_appstream
	ipa-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	338a5836de5d8636c1bc61413c9e9cc6	-	ol9_x86_64_appstream
	ipa-selinux-4.12.2-1.0.1.el9_5.3.noarch.rpm	07353186e6247db0876ec9186217d702	-	ol9_x86_64_appstream
	ipa-selinux-luna-4.12.2-1.0.1.el9_5.3.noarch.rpm	31d31221102a0dceb58de71b22b598d9	-	ol9_x86_64_appstream
	ipa-selinux-nfast-4.12.2-1.0.1.el9_5.3.noarch.rpm	cdffba0373beddbbe97fcc0871a4828c	-	ol9_x86_64_appstream
	ipa-server-4.12.2-1.0.1.el9_5.3.x86_64.rpm	1d969dc429991c956460332481ddfcc6	-	ol9_x86_64_appstream
	ipa-server-common-4.12.2-1.0.1.el9_5.3.noarch.rpm	67207570ad60a92988bbac4b946ba8ac	-	ol9_x86_64_appstream
	ipa-server-dns-4.12.2-1.0.1.el9_5.3.noarch.rpm	b00b4acb4a659bed720223bd859e7055	-	ol9_x86_64_appstream
	ipa-server-trust-ad-4.12.2-1.0.1.el9_5.3.x86_64.rpm	de35eaa1943f62bcd508d234f9d11ac4	-	ol9_x86_64_appstream
	python3-ipaclient-4.12.2-1.0.1.el9_5.3.noarch.rpm	55a7d762f679d6db363240b0da3fdb1f	-	ol9_x86_64_appstream
	python3-ipalib-4.12.2-1.0.1.el9_5.3.noarch.rpm	714cbb2c07e1e881a3c8140abcbb14e8	-	ol9_x86_64_appstream
	python3-ipaserver-4.12.2-1.0.1.el9_5.3.noarch.rpm	3364cdd2dce77f684c67fca46d6f38b7	-	ol9_x86_64_appstream
	python3-ipatests-4.12.2-1.0.1.el9_5.3.noarch.rpm	7fff5227d2a6f2e4ff8e893a9ee9ce79	-	ol9_x86_64_codeready_builder