ipa-4.4.0-14.1.1.0.1.el7.AXS7

エラータID: AXSA:2017-1217:01

Release date: 
Wednesday, January 4, 2017 - 10:18
Subject: 
ipa-4.4.0-14.1.1.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).

Security issues fixed with this release:

CVE-2016-7030
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-9575
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2016-7030
FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.
CVE-2016-9575
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.
Additional Info: 

N/A

Download: 

SRPMS
  1. ipa-4.4.0-14.1.1.0.1.el7.AXS7.src.rpm
    MD5: 02aa4c0445d28927c8f6f14eefe4680e
    SHA-256: 1c88a48735a7f2630e453e8f6d2b294f677428a2c0834fbe2611d97f4a0b22c0
    Size: 6.83 MB

Asianux Server 7 for x86_64
  1. ipa-admintools-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: 23a13ceae44a442c4d1ae29ef3b547f0
    SHA-256: 58b11ddfd7b9eade654860256eb9b3b63e3d8e48db19370e98b9e3269d121c81
    Size: 120.13 kB
  2. ipa-client-4.4.0-14.1.1.0.1.el7.AXS7.x86_64.rpm
    MD5: c296e3debf71ce9884f4efc68e291f04
    SHA-256: 852247f5c945e5259ba0e1c97900e0420787d9677d0472b1581d02a289b994d0
    Size: 227.31 kB
  3. ipa-client-common-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: 26257924cb26c3de9eed28c368822498
    SHA-256: 5ba7b93e262da7efee0116a31d26a37d93ad137b31e774c60fad3586312f5976
    Size: 120.94 kB
  4. ipa-common-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: a8a08b639b0bfc7c5613525e0667d317
    SHA-256: 196df0fbb1eab5b2a09f36f69d50fb1e70f77843747146c335ff6c639b55e01c
    Size: 438.62 kB
  5. ipa-server-4.4.0-14.1.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 322eaee898b5715f02b0eaf54a3e93e6
    SHA-256: 27703b63597ead0213e5a00823a9e36372f0b3a62c3d16ff9e41537548af82c8
    Size: 434.43 kB
  6. ipa-server-common-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: 45cceb82b09592de9d761175214864e4
    SHA-256: 3534a51520b9d792208fb3f46eb9589f0f6a675808cfc2469e9a63953ed0dc71
    Size: 619.20 kB
  7. ipa-server-dns-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: 93a9baf5b8023275db40004991b664e2
    SHA-256: 5b9532e3a678a4d0afd45a82c674f96160ac324da9f345ffbef59bced4c38a95
    Size: 118.96 kB
  8. ipa-server-trust-ad-4.4.0-14.1.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 0975b68b1ad1fece45aa70666f115abe
    SHA-256: 6cb4b5f642b7514e8e5f15e08804d362fa8fa9c5d1ca54729c58e56d8c1228a6
    Size: 202.87 kB
  9. python2-ipaclient-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: 4dc774ee2b89725b331d7c39db0b5b45
    SHA-256: b09d5fbfc244b17254fabcb3674e4daaeb888c4de3a038aacbc15aff3072021e
    Size: 537.09 kB
  10. python2-ipalib-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: 74b7240ddaf63aad0effcdc84a416892
    SHA-256: ddc5cffcae71b98d6cad2a0d7cd6772813274b0a5d59d20e5ae011a89164e0ab
    Size: 651.58 kB
  11. python2-ipaserver-4.4.0-14.1.1.0.1.el7.AXS7.noarch.rpm
    MD5: a8bb70ad8c8cc89a82f224bf6b1734b7
    SHA-256: df97fc0105a8e61c49eb26bc4fe8fb5869a0f79241b3bb90c8422e4f69b861c6
    Size: 1.27 MB