The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ipalibUpgrade python3-ipaclientUpgrade ipa-selinuxUpgrade python3-ipatestsUpgrade ipa-client-epnUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade ipa-client-sambaUpgrade ipa-selinux-lunaUpgrade ipa-server-commonUpgrade python3-ipaserverUpgrade ipa-selinux-nfast | Jan 20, 2025 | Jan 15, 2025 |
| Debian | — | Upgrade freeipa | May 15, 2025 | Jan 15, 2025 |
| Oracle_linux | — | Upgrade ipa-server-trust-adUpgrade ipa-commonUpgrade ipa-selinux-lunaUpgrade ipa-clientUpgrade ipa-serverUpgrade python3-ipalibUpgrade python3-ipaserverUpgrade ipa-selinuxUpgrade ipa-selinux-nfastUpgrade python3-ipatestsUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-client-epnUpgrade python3-ipaclient | Jan 16, 2025 | Jan 15, 2025 |
| Redhat_linux | — | Upgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade ipa-selinux-nfastUpgrade ipa-debugsourceUpgrade ipa-server-commonUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade ipa-selinux-lunaUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade ipa-selinuxUpgrade ipa-commonUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-serverUpgrade python3-ipatestsUpgrade ipa-server-trust-ad-debuginfo | Jan 16, 2025 | Jan 15, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub