Red Hat Product Errata RHBA-2024:9147 - Bug Fix Advisory
Issued:
2024-11-12
Updated:
2024-11-12

RHBA-2024:9147 - Bug Fix Advisory

Synopsis

ipa bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ipa is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

  • RHEL-18062 - ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist
  • RHEL-26261 - Fix replica connection check for use with AD administrator
  • RHEL-30553 - In RHEL9 there is a new package nfsv4-client-utils. ipa-client requires the full nfs-utils. With that prevents using the nfsv4-client-utils. Can the ipa-client rpm requirement be made more tolerant to accept instead of nfs-utils also nfsv4-client-utils?
  • RHEL-39140 - Rebase ipa to the latest 4.12 version for RHEL 9.5
  • RHEL-39950 - ipa-client can't be installed because of a missing dependency
  • RHEL-4810 - [RFE] FreeIPA-to-FreeIPA migration
  • RHEL-4807 - [RFE] Support in IPA for HSM boxes
  • RHEL-22188 - [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to
  • RHEL-41194 - ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  • RHEL-46559 - [RHEL9.5] Include latest fixes in python3-ipatests packages.
  • RHEL-40890 - ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
  • RHEL-45463 - ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  • RHEL-46003 - ipa-migrate -V options fails to display version.
  • RHEL-46009 - ipa-migrate with -Z option fails with ValueError: option error.
  • RHEL-47146 - Pagure #9629: Syntax error uninstalling the selinux-luna subpackage
  • RHEL-47292 - [RHEL9.5] Include latest fixes in python3-ipatests packages.
  • RHEL-27856 - 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install
  • RHEL-40359 - With unreachable AD, ipa trust returns an internal error
  • RHEL-49602 - misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  • RHEL-50804 - ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  • RHEL-51944 - [RHEL9.5] Include latest fixes in python3-ipatests packages.
  • RHEL-52222 - Pagure #9626: ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure.
  • RHEL-53500 - Pagure #9637: adtrustinstance only prints issues in check_inst() and does not log them

CVEs

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
ipa-4.12.2-1.el9.src.rpm SHA-256: e78118b18f2657409fff852717422aa9b59747ca57af70a36b664b57e28b1df6
x86_64
ipa-client-4.12.2-1.el9.x86_64.rpm SHA-256: 5a92e8359af44d5a4218a5b09457d29337021d451aa11f624189860026c5d00a
ipa-client-common-4.12.2-1.el9.noarch.rpm SHA-256: fa1bd13d256fa4f9ede62a65f2e3755c61bbced6e85e31090a1745f9207485d5
ipa-client-debuginfo-4.12.2-1.el9.x86_64.rpm SHA-256: 90d8c5fb52621cb5b3dbf84d5853786b570813c7065ec4eb273546e3aedf0f0e
ipa-client-epn-4.12.2-1.el9.x86_64.rpm SHA-256: 5cd7f7f2c1b6058617f28c6458dc8a1eb0a8147f7169365b4d4a51700b3962ab
ipa-client-samba-4.12.2-1.el9.x86_64.rpm SHA-256: 8d77e598627ed7ac699f2b355c56e46b0a4972753253dce1661dba06d84a4e3f
ipa-common-4.12.2-1.el9.noarch.rpm SHA-256: 2b4b4f62957cbc233f5d4f6e1a4f354ef0fec4ea2dd80b602c92b6806d5713e5
ipa-debuginfo-4.12.2-1.el9.x86_64.rpm SHA-256: 5f90addabbad1cef659303c21b21e72bce1e739a36346f1f62095b9da4480b71
ipa-debugsource-4.12.2-1.el9.x86_64.rpm SHA-256: ff4afd455f9433e9f658696d6cd061ab6753c2e1aee4c2e18a4b2f2aeab1b2f6
ipa-selinux-4.12.2-1.el9.noarch.rpm SHA-256: b79501b9cfdceb593a49b4d59525ef95289be8171ab86d8e344d927ab0afefa2
ipa-selinux-luna-4.12.2-1.el9.noarch.rpm SHA-256: 023c7eab58bd63e2406e63948acb6e6ce8f94509a10a5af59bc3079352570206
ipa-selinux-nfast-4.12.2-1.el9.noarch.rpm SHA-256: f8dc113bfd8b1711ba6e74354580ffd0a6cb0c2d6a48b1a018bef50253849070
ipa-server-4.12.2-1.el9.x86_64.rpm SHA-256: b6defafc52752c79539a72afcf96862db1f1627d3fb7eb7facac454aadf3ca59
ipa-server-common-4.12.2-1.el9.noarch.rpm SHA-256: f366389ddb1958cd123ba7b73060a49d2850576afa6244b9d2d5754ff767a2fc
ipa-server-debuginfo-4.12.2-1.el9.x86_64.rpm SHA-256: 666302f839f61396b129e742e5e27cd8494b1b91496ec25f0e182d512289e7c1
ipa-server-dns-4.12.2-1.el9.noarch.rpm SHA-256: 35979e3d60127c39df350e273102417ee431a38570dc99d14f518d3020e792e9
ipa-server-trust-ad-4.12.2-1.el9.x86_64.rpm SHA-256: 159b004420d608c2f18680f6b8c97a767ed013dbd92f784b6d1f73d408a6e301
ipa-server-trust-ad-debuginfo-4.12.2-1.el9.x86_64.rpm SHA-256: b791540dccb67b11cb5a60d9b693d9976f69f014328fb50017f0912208fa3250
python3-ipaclient-4.12.2-1.el9.noarch.rpm SHA-256: fc50463c8e5aa693421e2faf0d9a2a193c2fa14f516c06127adfbd0f6b0185ea
python3-ipalib-4.12.2-1.el9.noarch.rpm SHA-256: 3da4b8476f39f9b2ceffd2c425a11e3af8d6f9b8d3db0a9a6a516fd14c399d85
python3-ipaserver-4.12.2-1.el9.noarch.rpm SHA-256: 32a12486ad73dbd4b8df37ad3121a084b5f614c25a569d9e8c1cd16ace149eda

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
ipa-4.12.2-1.el9.src.rpm SHA-256: e78118b18f2657409fff852717422aa9b59747ca57af70a36b664b57e28b1df6
s390x
ipa-client-4.12.2-1.el9.s390x.rpm SHA-256: f534cf21c0dac6b89eb1040cf6093b648078235f6711da1159829d93764ee775
ipa-client-common-4.12.2-1.el9.noarch.rpm SHA-256: fa1bd13d256fa4f9ede62a65f2e3755c61bbced6e85e31090a1745f9207485d5
ipa-client-debuginfo-4.12.2-1.el9.s390x.rpm SHA-256: ce74d1c51d9a533f69b5fc6c44b905d4199e5c0759636f88e98123b5c9006e9e
ipa-client-epn-4.12.2-1.el9.s390x.rpm SHA-256: bc6e4270f534e10c3d57f3280207d1b5c5371f7c8e1ea6ae655820220dee1d94
ipa-client-samba-4.12.2-1.el9.s390x.rpm SHA-256: 743bdd8cd11901f0ed1b48119c21f60f0b0674d6e19a87b1455cc1973b51bbe3
ipa-common-4.12.2-1.el9.noarch.rpm SHA-256: 2b4b4f62957cbc233f5d4f6e1a4f354ef0fec4ea2dd80b602c92b6806d5713e5
ipa-debuginfo-4.12.2-1.el9.s390x.rpm SHA-256: 194ecfe60de41959bbee525a3c741b4e78f9fadb88f5be651f9d3cd5a27b1dda
ipa-debugsource-4.12.2-1.el9.s390x.rpm SHA-256: 1f05c73cf968312844a806069a4158249ab499b8efca48299c6c98f9aa95a785
ipa-selinux-4.12.2-1.el9.noarch.rpm SHA-256: b79501b9cfdceb593a49b4d59525ef95289be8171ab86d8e344d927ab0afefa2
ipa-selinux-luna-4.12.2-1.el9.noarch.rpm SHA-256: 023c7eab58bd63e2406e63948acb6e6ce8f94509a10a5af59bc3079352570206
ipa-selinux-nfast-4.12.2-1.el9.noarch.rpm SHA-256: f8dc113bfd8b1711ba6e74354580ffd0a6cb0c2d6a48b1a018bef50253849070
ipa-server-4.12.2-1.el9.s390x.rpm SHA-256: 378ff94366c8137a21042d1722a7aa04cc3837c5278691197d9bffdfbcebd716
ipa-server-common-4.12.2-1.el9.noarch.rpm SHA-256: f366389ddb1958cd123ba7b73060a49d2850576afa6244b9d2d5754ff767a2fc
ipa-server-debuginfo-4.12.2-1.el9.s390x.rpm SHA-256: 3639e5f89ef3ccd9e085164026f13e52787b4098a39192675289200e0e64c6a9
ipa-server-dns-4.12.2-1.el9.noarch.rpm SHA-256: 35979e3d60127c39df350e273102417ee431a38570dc99d14f518d3020e792e9
ipa-server-trust-ad-4.12.2-1.el9.s390x.rpm SHA-256: 951c04722df01fae5409ee60fee16279e6983aad218b95312e6d160f05370a95
ipa-server-trust-ad-debuginfo-4.12.2-1.el9.s390x.rpm SHA-256: a121308aeb0c0458c3e8505bc962d610f41739f5d05d46ceb031c0a367b39a4a
python3-ipaclient-4.12.2-1.el9.noarch.rpm SHA-256: fc50463c8e5aa693421e2faf0d9a2a193c2fa14f516c06127adfbd0f6b0185ea
python3-ipalib-4.12.2-1.el9.noarch.rpm SHA-256: 3da4b8476f39f9b2ceffd2c425a11e3af8d6f9b8d3db0a9a6a516fd14c399d85
python3-ipaserver-4.12.2-1.el9.noarch.rpm SHA-256: 32a12486ad73dbd4b8df37ad3121a084b5f614c25a569d9e8c1cd16ace149eda

Red Hat Enterprise Linux for Power, little endian 9

SRPM
ipa-4.12.2-1.el9.src.rpm SHA-256: e78118b18f2657409fff852717422aa9b59747ca57af70a36b664b57e28b1df6
ppc64le
ipa-client-4.12.2-1.el9.ppc64le.rpm SHA-256: 5fdd1cc9218767571ed38ea888b345f373df98a827115e4f9224d7aef5ba7a55
ipa-client-common-4.12.2-1.el9.noarch.rpm SHA-256: fa1bd13d256fa4f9ede62a65f2e3755c61bbced6e85e31090a1745f9207485d5
ipa-client-debuginfo-4.12.2-1.el9.ppc64le.rpm SHA-256: 6dcd6f5c1cdee61c9c122174deca0f1ab911b81476990daa1807339001df6cbd
ipa-client-epn-4.12.2-1.el9.ppc64le.rpm SHA-256: 74ddb1dd2f30c2d3451eebb57ec68cf7d22aa8e87e36463ed92dd0cd6ebb765f
ipa-client-samba-4.12.2-1.el9.ppc64le.rpm SHA-256: ecd28cb6bc895223d96bb037527089b3fc84ff0c4dc4d0febaf6e9c273068ea3
ipa-common-4.12.2-1.el9.noarch.rpm SHA-256: 2b4b4f62957cbc233f5d4f6e1a4f354ef0fec4ea2dd80b602c92b6806d5713e5
ipa-debuginfo-4.12.2-1.el9.ppc64le.rpm SHA-256: 8c897efc084a2fb4178e47601a5de5e60a95bb70bced377a62ba504684c2d566
ipa-debugsource-4.12.2-1.el9.ppc64le.rpm SHA-256: a75c5b0be6e187b1aaeb977c9aa84ac630d90295337564543b38c1a4edcdec85
ipa-selinux-4.12.2-1.el9.noarch.rpm SHA-256: b79501b9cfdceb593a49b4d59525ef95289be8171ab86d8e344d927ab0afefa2
ipa-selinux-luna-4.12.2-1.el9.noarch.rpm SHA-256: 023c7eab58bd63e2406e63948acb6e6ce8f94509a10a5af59bc3079352570206
ipa-selinux-nfast-4.12.2-1.el9.noarch.rpm SHA-256: f8dc113bfd8b1711ba6e74354580ffd0a6cb0c2d6a48b1a018bef50253849070
ipa-server-4.12.2-1.el9.ppc64le.rpm SHA-256: 101c3a3a014c33a99301c12117338cde892163717651c9e09e7c77e8394546b8
ipa-server-common-4.12.2-1.el9.noarch.rpm SHA-256: f366389ddb1958cd123ba7b73060a49d2850576afa6244b9d2d5754ff767a2fc
ipa-server-debuginfo-4.12.2-1.el9.ppc64le.rpm SHA-256: 204fede7402f3fd9eb2b1ff31251cd0152b9a1b34089ba961eac893dd39d8051
ipa-server-dns-4.12.2-1.el9.noarch.rpm SHA-256: 35979e3d60127c39df350e273102417ee431a38570dc99d14f518d3020e792e9
ipa-server-trust-ad-4.12.2-1.el9.ppc64le.rpm SHA-256: 2dbbfe2a43836241b86c30a8071d32ec8781b96c143bfb5f0bc0208e908be8e8
ipa-server-trust-ad-debuginfo-4.12.2-1.el9.ppc64le.rpm SHA-256: bcca29b62a12febfdf5cba9fa084a802abffc01e74d4a1a14c0954e999018c7d
python3-ipaclient-4.12.2-1.el9.noarch.rpm SHA-256: fc50463c8e5aa693421e2faf0d9a2a193c2fa14f516c06127adfbd0f6b0185ea
python3-ipalib-4.12.2-1.el9.noarch.rpm SHA-256: 3da4b8476f39f9b2ceffd2c425a11e3af8d6f9b8d3db0a9a6a516fd14c399d85
python3-ipaserver-4.12.2-1.el9.noarch.rpm SHA-256: 32a12486ad73dbd4b8df37ad3121a084b5f614c25a569d9e8c1cd16ace149eda

Red Hat Enterprise Linux for ARM 64 9

SRPM
ipa-4.12.2-1.el9.src.rpm SHA-256: e78118b18f2657409fff852717422aa9b59747ca57af70a36b664b57e28b1df6
aarch64
ipa-client-4.12.2-1.el9.aarch64.rpm SHA-256: d6e02dbb720aef59806dbd326cbb60797d8809d7cd5b410587930ae5a0ce3d41
ipa-client-common-4.12.2-1.el9.noarch.rpm SHA-256: fa1bd13d256fa4f9ede62a65f2e3755c61bbced6e85e31090a1745f9207485d5
ipa-client-debuginfo-4.12.2-1.el9.aarch64.rpm SHA-256: e5f77b6395500651feac57cd3af504012d9b173139bd2fb77d2cc43198c50922
ipa-client-epn-4.12.2-1.el9.aarch64.rpm SHA-256: 2ce21535a8c73b942b685d3249ce6dc661c309aa24d160ec4be359a24fd4e948
ipa-client-samba-4.12.2-1.el9.aarch64.rpm SHA-256: 72a9270d5ae511b7532d087c91f92de6416b3554070c59de021741303fce222d
ipa-common-4.12.2-1.el9.noarch.rpm SHA-256: 2b4b4f62957cbc233f5d4f6e1a4f354ef0fec4ea2dd80b602c92b6806d5713e5
ipa-debuginfo-4.12.2-1.el9.aarch64.rpm SHA-256: 162de5685a848a329b375e7a9d1a72d464280591f95cff16cc9c838b5785d790
ipa-debugsource-4.12.2-1.el9.aarch64.rpm SHA-256: ab2ddc54c5b6a8f69bfc0fe711b5e50974031365c88bce52385e0d9817926b4f
ipa-selinux-4.12.2-1.el9.noarch.rpm SHA-256: b79501b9cfdceb593a49b4d59525ef95289be8171ab86d8e344d927ab0afefa2
ipa-selinux-luna-4.12.2-1.el9.noarch.rpm SHA-256: 023c7eab58bd63e2406e63948acb6e6ce8f94509a10a5af59bc3079352570206
ipa-selinux-nfast-4.12.2-1.el9.noarch.rpm SHA-256: f8dc113bfd8b1711ba6e74354580ffd0a6cb0c2d6a48b1a018bef50253849070
ipa-server-4.12.2-1.el9.aarch64.rpm SHA-256: ab98eba2d7c973e671c9d5033adf77ba146aca60d855d701d1bb9e62b754942f
ipa-server-common-4.12.2-1.el9.noarch.rpm SHA-256: f366389ddb1958cd123ba7b73060a49d2850576afa6244b9d2d5754ff767a2fc
ipa-server-debuginfo-4.12.2-1.el9.aarch64.rpm SHA-256: 201e7aff0df970dfcbf18e65e33c713af631c915a2c5b446c0f1e104e355eebb
ipa-server-dns-4.12.2-1.el9.noarch.rpm SHA-256: 35979e3d60127c39df350e273102417ee431a38570dc99d14f518d3020e792e9
ipa-server-trust-ad-4.12.2-1.el9.aarch64.rpm SHA-256: 2a7ced66fcee6d466c55d906892d7194ed6e3051ed75ebe7b923a853603f7aaf
ipa-server-trust-ad-debuginfo-4.12.2-1.el9.aarch64.rpm SHA-256: 4db81d67ed6cc7b41c1f7a84aba11e4521244ff86a5c0d577cd60cf4c5b2a494
python3-ipaclient-4.12.2-1.el9.noarch.rpm SHA-256: fc50463c8e5aa693421e2faf0d9a2a193c2fa14f516c06127adfbd0f6b0185ea
python3-ipalib-4.12.2-1.el9.noarch.rpm SHA-256: 3da4b8476f39f9b2ceffd2c425a11e3af8d6f9b8d3db0a9a6a516fd14c399d85
python3-ipaserver-4.12.2-1.el9.noarch.rpm SHA-256: 32a12486ad73dbd4b8df37ad3121a084b5f614c25a569d9e8c1cd16ace149eda

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
python3-ipatests-4.12.2-1.el9.noarch.rpm SHA-256: 39278d469bf344f5779f8b97d12932d45ae92c7452dd35418c0b7a3be93411be

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
python3-ipatests-4.12.2-1.el9.noarch.rpm SHA-256: 39278d469bf344f5779f8b97d12932d45ae92c7452dd35418c0b7a3be93411be

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
python3-ipatests-4.12.2-1.el9.noarch.rpm SHA-256: 39278d469bf344f5779f8b97d12932d45ae92c7452dd35418c0b7a3be93411be

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
python3-ipatests-4.12.2-1.el9.noarch.rpm SHA-256: 39278d469bf344f5779f8b97d12932d45ae92c7452dd35418c0b7a3be93411be

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.