USN-4792-1: FreeIPA vulnerabilities
15 March 2021
Several security issues were fixed in FreeIPA.
Releases
Packages
- freeipa - FreeIPA centralized identity framework
Details
It was discovered that FreeIPA incorrectly handled certificates. An
attacker could possibly use this issue to cause a denial of service by
revoking arbitrary certificates This issue only affected Ubuntu 16.04 ESM.
(CVE-2016-5404)
It was discovered that FreeIPA incorrectly handled authentication attempts.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2016-7030)
It was discovered that FreeIPA incorrectly handled user's permissions. An
authenticated attacker could possibly use this issue to modify other user's
profiles or other unspecified impact. This issue only affected Ubuntu 16.04
ESM. (CVE-2016-9575)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
freeipa-server-trust-ad
-
4.3.1-0ubuntu1+esm1
Available with Ubuntu Pro
-
python-ipaclient
-
4.3.1-0ubuntu1+esm1
Available with Ubuntu Pro
-
freeipa-client
-
4.3.1-0ubuntu1+esm1
Available with Ubuntu Pro
-
python-ipalib
-
4.3.1-0ubuntu1+esm1
Available with Ubuntu Pro
-
freeipa-server
-
4.3.1-0ubuntu1+esm1
Available with Ubuntu Pro
-
python-ipaserver
-
4.3.1-0ubuntu1+esm1
Available with Ubuntu Pro
Ubuntu 14.04
-
freeipa-client
-
3.3.4-0ubuntu3.1+esm1
Available with Ubuntu Pro
-
python-freeipa
-
3.3.4-0ubuntu3.1+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.