p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de softhsm

Vulnérabilités publiées pour softhsm au cours des 30 derniers jours : 1. Présentes dans le catalogue KEV : 0.

RSS ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 11

  1. RLSA-2026:83460

    Critique · CVSS 9.8Correctif disponible

    Critical: idm:DL1 security, bug fix, and enhancement update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198) * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197) * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861) * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrar

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. RLSA-2025:17129

    Critique · CVSS 9.1Correctif disponible

    Important: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. RLSA-2025:21140

    Élevée · CVSS 8.6Correctif disponible

    Important: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088) * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. RLSA-2025:9188

    Critique · CVSS 9.1Correctif disponible

    Important: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. RLSA-2024:3755

    Non évaluéeCorrectif disponible

    Important: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service * CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References sec

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. RLSA-2024:3267

    Non évaluéeCorrectif disponible

    Moderate: idm:DL1 and idm:client security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * JWCrypto: denail of service Via specifically crafted JWE (CVE-2023-6681) * python-jwcrypto: malicious JWE token can cause denial of service (CVE-2024-28102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  7. RLSA-2024:3044

    Non évaluéeCorrectif disponible

    Moderate: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the Refere

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. RLSA-2024:0143

    Élevée · CVSS 7.2Correctif disponible

    Moderate: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049) * ipa: Invalid CSRF protection (CVE-2023-5455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. RLSA-2021:5142

    Élevée · CVSS 7.2Correctif disponible

    Moderate: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets (CVE-2020-25719) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.4.0+429+6bd33fea
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. RLSA-2021:1983

    Élevée · CVSS 7.5Correctif disponible

    Important: idm:DL1 security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * slapi-nis: NULL dereference (DoS) with specially crafted Binding DN (CVE-2021-3480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.4.0+429+6bd33fea
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  11. RLSA-2021:1846

    Moyenne · CVSS 6.1Correctif disponible

    Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.4

    softhsmSystèmes d’exploitation
    • Mettez à jour vers 0:2.6.0-5.module+el8.4.0+429+6bd33fea
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →