stable

freeipa-4.4.3-1.fc25

FEDORA-2016-ca1d1e1dc1 created by pvoborni 6 years ago for Fedora 25

Rebase to upstream 4.4.3: http://www.freeipa.org/page/Releases/4.4.3


  • Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
  • Fixes 1370493 - CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-ca1d1e1dc1

This update has been submitted for testing by pvoborni.

6 years ago

This update has obsoleted freeipa-4.4.2-2.fc25, and has inherited its bugs and notes.

6 years ago

This update has been pushed to testing.

6 years ago
User Icon mbasti commented & provided feedback 6 years ago
karma

Works for me

User Icon mbabinsk commented & provided feedback 6 years ago
karma

Works as expected.

BZ#1395311 CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
BZ#1404718 CVE-2016-9575 freeipa: ipa: Insufficient permission check in certprofile-mod [fedora-all]
BZ#1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy
BZ#1404690 CVE-2016-7030 freeipa: ipa: DoS attack against kerberized services by abusing password policy [fedora-all]
User Icon stlaz commented & provided feedback 6 years ago

Works for me.

BZ#1395311 CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
BZ#1404718 CVE-2016-9575 freeipa: ipa: Insufficient permission check in certprofile-mod [fedora-all]
BZ#1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy
BZ#1404690 CVE-2016-7030 freeipa: ipa: DoS attack against kerberized services by abusing password policy [fedora-all]

This update has been submitted for stable by bodhi.

6 years ago
User Icon stlaz provided feedback 6 years ago
karma

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata
Type
security
Karma
3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
6 years ago
in testing
6 years ago
in stable
6 years ago
BZ#1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy
0
1
BZ#1395311 CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
0
1
BZ#1404690 CVE-2016-7030 freeipa: ipa: DoS attack against kerberized services by abusing password policy [fedora-all]
0
1
BZ#1404718 CVE-2016-9575 freeipa: ipa: Insufficient permission check in certprofile-mod [fedora-all]
0
1

Automated Test Results