RLBA-2024:1598

Synopsis

idm:DL1 bug fix and enhancement update

Description

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Bug Fix(es) and Enhancement(s):

* Pagure #9465: IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified [rhel-8.9.0.z] (JIRA:Rocky Linux-24356)

* Pagure #9517: sidgen plugin does not ignore staged users [rhel-8.9.0.z] (JIRA:Rocky Linux-24380)

* Memory leak in IdM's KDC [rhel-8.9.0.z] (JIRA:Rocky Linux-24384)

* Pagure #9519: session cookie can't be read [rhel-8.9.0.z] (JIRA:Rocky Linux-24387)

* Enable Bronze-Bit check only if SIDs are set [rhel-8.9.0.z] (JIRA:Rocky Linux-24390)

* Pagure #9504: Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records [rhel-8.9.0.z] (JIRA:Rocky Linux-24395)

* Pagure #9514: Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor [rhel-8.9.0.z] (JIRA:Rocky Linux-24399)

* tier-1-upstream-dns-locations failed on Rocky Linux8.8 gating [rhel-8.9.0.z] (JIRA:Rocky Linux-25711)

* Pagure #9535: ipa-kdb: Cannot determine if PAC generator is available [rhel-8.9.0.z] (JIRA:Rocky Linux-25745)

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

CVEs

Affected packages

Rocky Linux 8 aarch64 - AppStream

bind-dyndb-ldap-0:11.6-4.module+el8.9.0+1371+ffa84eb9.aarch64.rpm bind-dyndb-ldap-0:11.6-4.module+el8.9.0+1371+ffa84eb9.src.rpm bind-dyndb-ldap-debuginfo-0:11.6-4.module+el8.9.0+1371+ffa84eb9.aarch64.rpm bind-dyndb-ldap-debugsource-0:11.6-4.module+el8.9.0+1371+ffa84eb9.aarch64.rpm custodia-0:0.6.0-3.module+el8.9.0+1371+ffa84eb9.noarch.rpm custodia-0:0.6.0-3.module+el8.9.0+1371+ffa84eb9.src.rpm ipa-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.src.rpm ipa-client-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-client-common-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-client-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-client-epn-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-client-samba-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-common-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-debugsource-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-healthcheck-0:0.12-3.module+el8.9.0+1434+912e18bd.noarch.rpm ipa-healthcheck-0:0.12-3.module+el8.9.0+1433+5bd2f890.src.rpm ipa-healthcheck-core-0:0.12-3.module+el8.9.0+1433+5bd2f890.noarch.rpm ipa-python-compat-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-selinux-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-server-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-server-common-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-server-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-server-dns-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-server-trust-ad-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm ipa-server-trust-ad-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.aarch64.rpm opendnssec-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.aarch64.rpm opendnssec-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.src.rpm opendnssec-debuginfo-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.aarch64.rpm opendnssec-debugsource-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.aarch64.rpm python3-custodia-0:0.6.0-3.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-ipaclient-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-ipalib-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-ipaserver-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-ipatests-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-jwcrypto-0:0.5.0-1.1.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-kdcproxy-0:0.4-5.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-pyusb-0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-qrcode-0:5.1-12.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-qrcode-core-0:5.1-12.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-yubico-0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9.noarch.rpm python-jwcrypto-0:0.5.0-1.1.module+el8.9.0+1371+ffa84eb9.src.rpm python-kdcproxy-0:0.4-5.module+el8.9.0+1371+ffa84eb9.src.rpm python-qrcode-0:5.1-12.module+el8.9.0+1371+ffa84eb9.src.rpm python-yubico-0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9.src.rpm pyusb-0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9.src.rpm slapi-nis-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.aarch64.rpm slapi-nis-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.src.rpm slapi-nis-debuginfo-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.aarch64.rpm slapi-nis-debugsource-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.aarch64.rpm softhsm-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.aarch64.rpm softhsm-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.src.rpm softhsm-debuginfo-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.aarch64.rpm softhsm-debugsource-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.aarch64.rpm softhsm-devel-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

bind-dyndb-ldap-0:11.6-4.module+el8.9.0+1371+ffa84eb9.src.rpm bind-dyndb-ldap-0:11.6-4.module+el8.9.0+1371+ffa84eb9.x86_64.rpm bind-dyndb-ldap-debuginfo-0:11.6-4.module+el8.9.0+1371+ffa84eb9.x86_64.rpm bind-dyndb-ldap-debugsource-0:11.6-4.module+el8.9.0+1371+ffa84eb9.x86_64.rpm custodia-0:0.6.0-3.module+el8.9.0+1371+ffa84eb9.noarch.rpm custodia-0:0.6.0-3.module+el8.9.0+1371+ffa84eb9.src.rpm ipa-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.src.rpm ipa-client-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-client-common-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-client-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-client-epn-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-client-samba-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-common-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-debugsource-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-healthcheck-0:0.12-3.module+el8.9.0+1434+912e18bd.noarch.rpm ipa-healthcheck-0:0.12-3.module+el8.9.0+1433+5bd2f890.src.rpm ipa-healthcheck-core-0:0.12-3.module+el8.9.0+1433+5bd2f890.noarch.rpm ipa-python-compat-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-selinux-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-server-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-server-common-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-server-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-server-dns-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm ipa-server-trust-ad-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm ipa-server-trust-ad-debuginfo-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.x86_64.rpm opendnssec-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.src.rpm opendnssec-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.x86_64.rpm opendnssec-debuginfo-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.x86_64.rpm opendnssec-debugsource-0:2.1.7-1.module+el8.9.0+1371+ffa84eb9.x86_64.rpm python3-custodia-0:0.6.0-3.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-ipaclient-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-ipalib-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-ipaserver-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-ipatests-0:4.9.12-14.module+el8.9.0+1773+fcf5192f.noarch.rpm python3-jwcrypto-0:0.5.0-1.1.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-kdcproxy-0:0.4-5.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-pyusb-0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-qrcode-0:5.1-12.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-qrcode-core-0:5.1-12.module+el8.9.0+1371+ffa84eb9.noarch.rpm python3-yubico-0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9.noarch.rpm python-jwcrypto-0:0.5.0-1.1.module+el8.9.0+1371+ffa84eb9.src.rpm python-kdcproxy-0:0.4-5.module+el8.9.0+1371+ffa84eb9.src.rpm python-qrcode-0:5.1-12.module+el8.9.0+1371+ffa84eb9.src.rpm python-yubico-0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9.src.rpm pyusb-0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9.src.rpm slapi-nis-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.src.rpm slapi-nis-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.x86_64.rpm slapi-nis-debuginfo-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.x86_64.rpm slapi-nis-debugsource-0:0.60.0-4.module+el8.9.0+1573+39ab85f4.x86_64.rpm softhsm-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.src.rpm softhsm-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.x86_64.rpm softhsm-debuginfo-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.x86_64.rpm softhsm-debugsource-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.x86_64.rpm softhsm-devel-0:2.6.0-5.module+el8.9.0+1371+ffa84eb9.x86_64.rpm