RHBA-2011:1841 - Bug Fix Advisory

Topic

An updated ipa-client package that fixes one bug is now available for Red Hat
Enterprise Linux 5.

[Updated 20 December 2011]
This advisory has been updated with the correct product name (that is, Red Hat
Enterprise Linux 5) in the Details section. The package included in this revised
update has not been changed in any way from the package included in the original
advisory.

Description

The ipa-client package provides a tool to enroll a machine to an IPA version 2
server. IPA (Identity, Policy and Audit) is an integrated solution to provide
centrally managed identity, that is, machine, user, virtual machines, groups,
and authentication credentials.

This update fixes the following bug:

• The RHSA-2011-1533 security advisory, which fixed a security vulnerability in

the IPA web-based service, caused incompatibility with older versions of
ipa-client. As a consequence, ipa-client was unable to correctly submit
enrollment requests to IPA. With this update, ipa-client has been modified and
it now operates correctly with newer versions of IPA. Interoperability with
older versions of IPA remains unaffected. (BZ#768058)

All users of ipa-client are advised to upgrade to this updated package, which
fixes this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 768058 - ipa-client: Requires client-side changes for server-side fixes (due to CVE-2011-3636) [rhel-5.7.z]

CVEs

(none)

References

(none)