[El-errata] ELBA-2018-1395 Oracle Linux 7 ipa bug fix update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue May 15 00:01:00 PDT 2018


Oracle Linux Bug Fix Advisory ELBA-2018-1395

http://linux.oracle.com/errata/ELBA-2018-1395.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
ipa-client-4.5.4-10.0.1.el7_5.1.x86_64.rpm
ipa-client-common-4.5.4-10.0.1.el7_5.1.noarch.rpm
ipa-common-4.5.4-10.0.1.el7_5.1.noarch.rpm
ipa-python-compat-4.5.4-10.0.1.el7_5.1.noarch.rpm
ipa-server-4.5.4-10.0.1.el7_5.1.x86_64.rpm
ipa-server-common-4.5.4-10.0.1.el7_5.1.noarch.rpm
ipa-server-dns-4.5.4-10.0.1.el7_5.1.noarch.rpm
ipa-server-trust-ad-4.5.4-10.0.1.el7_5.1.x86_64.rpm
python2-ipaclient-4.5.4-10.0.1.el7_5.1.noarch.rpm
python2-ipalib-4.5.4-10.0.1.el7_5.1.noarch.rpm
python2-ipaserver-4.5.4-10.0.1.el7_5.1.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ipa-4.5.4-10.0.1.el7_5.1.src.rpm



Description of changes:

[4.5.4-10.0.1.el7_5]
- Blank out header-logo.png product-name.png
- Replace login-screen-logo.png [20362818]

[4.5.4-11.el7]
- Resolves: #1565519 Clarify the need to restart services in 
ipa-server-certinstall(1)
   - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS 
mode
   - Fix OTP validation in FIPS mode
   - Increase the default token key size
   - Revert "Don't allow OTP or RADIUS in FIPS mode"
   - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no 
support for encryption type
   - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an 
interface when IPA server/replica try to install with Specific IP 
address of that interface
   - replica-install: pass --ip-address to client install





More information about the El-errata mailing list