ipa-4.2.0-15.19.0.1.el7.AXS7

エラータID: AXSA:2016-658:03

Release date: 
Monday, September 12, 2016 - 17:21
Subject: 
ipa-4.2.0-15.19.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

IPA is an integrated solution to provide centrally managed Identity (machine,
user, virtual machines, groups, authentication credentials), Policy
(configuration settings, access control information) and Audit (events,
logs, analysis thereof).

Security issues fixed with this release:

CVE-2016-5404
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2016-5404
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
Additional Info: 

N/A

Download: 

SRPMS
  1. ipa-4.2.0-15.19.0.1.el7.AXS7.src.rpm
    MD5: 174608290f13d1b179450ab55bd1a103
    SHA-256: 5e7311ddfeb6cb4bb8267e2f6a47375eddfff43605673124e859df429570fe86
    Size: 6.07 MB

Asianux Server 7 for x86_64
  1. ipa-admintools-4.2.0-15.19.0.1.el7.AXS7.x86_64.rpm
    MD5: c43a4967cbd459d3edf6c4a27c0fe6d4
    SHA-256: b847abdc0f4607b52973c559b7d3426c0e957477b78537e1036e740288ffc58c
    Size: 94.08 kB
  2. ipa-client-4.2.0-15.19.0.1.el7.AXS7.x86_64.rpm
    MD5: 5cd3453cc5ee855b338a4011ef687120
    SHA-256: 39ef900d9f5af0f50aa5afcd01595f1a41163fa579b04232808333928d1842cc
    Size: 228.84 kB
  3. ipa-python-4.2.0-15.19.0.1.el7.AXS7.x86_64.rpm
    MD5: edd8f9c0653a6d3b7e09dd4bad8c6713
    SHA-256: 36c6755c74d9d6fce55ebad57b87d49e65fec464c17d96f1a08311d4cf36cb14
    Size: 1.37 MB
  4. ipa-server-4.2.0-15.19.0.1.el7.AXS7.x86_64.rpm
    MD5: bae44ac6f84dc77866e24e3df066ccf6
    SHA-256: 70d3b87d2626780b44d4d45dcfb1cc4e88325187c4033231f096ea990afcabb1
    Size: 1.30 MB
  5. ipa-server-dns-4.2.0-15.19.0.1.el7.AXS7.x86_64.rpm
    MD5: 2a3ac953672a9d0001c41d4abdcf8180
    SHA-256: c997f18434439c7cfbb79c4c55098f11c104c88d74710f988f10b8c1ef7d29e6
    Size: 78.06 kB
  6. ipa-server-trust-ad-4.2.0-15.19.0.1.el7.AXS7.x86_64.rpm
    MD5: 466f9cd25f4affb3a098b7a5f75143ef
    SHA-256: aca4dbc95792b723a3e226ea8d11b84f9a570e57af1139f16547417a49db49bd
    Size: 168.07 kB