p PatchFirst

ALSA-2024:3755

ALSA-2024:3755 · Important: idm:DL1 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service * CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind-dyndb-ldap AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 11.6-5.module_el8.10.0+3844+20e075e5.alma.2

    Update to 11.6-5.module_el8.10.0+3844+20e075e5.alma.2

  • custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • ipa-client AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-client-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-client-epn AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-client-samba AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-healthcheck AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-3.module_el8.9.0+3651+d05ea4c5

    Update to 0.12-3.module_el8.9.0+3651+d05ea4c5

  • ipa-healthcheck-core AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-3.module_el8.9.0+3651+d05ea4c5

    Update to 0.12-3.module_el8.9.0+3651+d05ea4c5

  • ipa-python-compat AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-selinux AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-server AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-server-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-server-dns AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • ipa-server-trust-ad AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • opendnssec AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.1.7-1.module_el8.6.0+2881+2f24dc92

    Update to 2.1.7-1.module_el8.6.0+2881+2f24dc92

  • opendnssec AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.1.7-1.module_el8.6.0+3031+2f24dc92

    Update to 2.1.7-1.module_el8.6.0+3031+2f24dc92

  • python3-custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • python3-ipaclient AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • python3-ipalib AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • python3-ipaserver AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • python3-ipatests AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-10.module_el8.10.0+3857+9c8da539

    Update to 4.9.13-10.module_el8.10.0+3857+9c8da539

  • python3-jwcrypto AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.5.0-2.module_el8.10.0+3844+20e075e5

    Update to 0.5.0-2.module_el8.10.0+3844+20e075e5

  • python3-kdcproxy AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.4-5.module_el8.9.0+3785+2238a12a

    Update to 0.4-5.module_el8.9.0+3785+2238a12a

Original sources

Check your server →