p PatchFirst

ALSA-2024:0143

ALSA-2024:0143 · Moderate: idm:DL1 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049) * ipa: Invalid CSRF protection (CVE-2023-5455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind-dyndb-ldap AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 11.6-4.module_el8.6.0+3339+9b5fdd22

    Update to 11.6-4.module_el8.6.0+3339+9b5fdd22

  • custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • ipa-client AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-client-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-client-epn AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-client-samba AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-healthcheck AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-3.module_el8.9.0+3651+d05ea4c5

    Update to 0.12-3.module_el8.9.0+3651+d05ea4c5

  • ipa-healthcheck-core AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-3.module_el8.9.0+3651+d05ea4c5

    Update to 0.12-3.module_el8.9.0+3651+d05ea4c5

  • ipa-python-compat AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-selinux AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-server AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-server-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-server-dns AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • ipa-server-trust-ad AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • opendnssec AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.1.7-1.module_el8.6.0+2881+2f24dc92

    Update to 2.1.7-1.module_el8.6.0+2881+2f24dc92

  • opendnssec AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.1.7-1.module_el8.6.0+3031+2f24dc92

    Update to 2.1.7-1.module_el8.6.0+3031+2f24dc92

  • python3-custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • python3-ipaclient AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • python3-ipalib AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • python3-ipaserver AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • python3-ipatests AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

    Update to 4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1

  • python3-jwcrypto AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.5.0-1.1.module_el8.7.0+3349+cfeff52e

    Update to 0.5.0-1.1.module_el8.7.0+3349+cfeff52e

  • python3-kdcproxy AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.4-5.module_el8.9.0+3682+f63caf3e

    Update to 0.4-5.module_el8.9.0+3682+f63caf3e

Original sources

Check your server →