[El-errata] ELBA-2019-4268 Oracle Linux 8 idm:DL1 bug fix update

Fri Jan 3 13:43:59 PST 2020

Oracle Linux Bug Fix Advisory ELBA-2019-4268

http://linux.oracle.com/errata/ELBA-2019-4268.html

The following updated rpms for Oracle Linux 8 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
bind-dyndb-ldap-11.1-14.module+el8.1.0+5409+d30b476c.x86_64.rpm
custodia-0.6.0-3.module+el8.1.0+5409+d30b476c.noarch.rpm
ipa-client-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.x86_64.rpm
ipa-client-common-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-client-samba-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.x86_64.rpm
ipa-common-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-healthcheck-0.3-4.module+el8.1.0+5409+d30b476c.noarch.rpm
ipa-idoverride-memberof-plugin-0.0.4-6.module+el8.1.0+5409+d30b476c.x86_64.rpm
ipa-python-compat-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-server-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.x86_64.rpm
ipa-server-common-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-server-dns-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-server-trust-ad-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.x86_64.rpm
opendnssec-1.4.14-1.module+el8.1.0+5409+d30b476c.x86_64.rpm
python3-custodia-0.6.0-3.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-ipaclient-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
python3-ipalib-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
python3-ipaserver-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
python3-jwcrypto-0.5.0-1.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-kdcproxy-0.4-3.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-pyusb-1.0.0-9.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-qrcode-5.1-12.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-qrcode-core-5.1-12.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-yubico-1.3.2-9.module+el8.1.0+5409+d30b476c.noarch.rpm
slapi-nis-0.56.3-2.module+el8.1.0+5409+d30b476c.x86_64.rpm
softhsm-2.4.0-2.module+el8.1.0+5409+d30b476c.x86_64.rpm
softhsm-devel-2.4.0-2.module+el8.1.0+5409+d30b476c.x86_64.rpm

aarch64:
bind-dyndb-ldap-11.1-14.module+el8.1.0+5409+d30b476c.aarch64.rpm
custodia-0.6.0-3.module+el8.1.0+5409+d30b476c.noarch.rpm
ipa-client-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.aarch64.rpm
ipa-client-common-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-client-samba-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.aarch64.rpm
ipa-common-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-healthcheck-0.3-4.module+el8.1.0+5409+d30b476c.noarch.rpm
ipa-idoverride-memberof-plugin-0.0.4-6.module+el8.1.0+5409+d30b476c.aarch64.rpm
ipa-python-compat-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-server-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.aarch64.rpm
ipa-server-common-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-server-dns-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
ipa-server-trust-ad-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.aarch64.rpm
opendnssec-1.4.14-1.module+el8.1.0+5409+d30b476c.aarch64.rpm
python3-custodia-0.6.0-3.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-ipaclient-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
python3-ipalib-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
python3-ipaserver-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.noarch.rpm
python3-jwcrypto-0.5.0-1.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-kdcproxy-0.4-3.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-pyusb-1.0.0-9.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-qrcode-5.1-12.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-qrcode-core-5.1-12.module+el8.1.0+5409+d30b476c.noarch.rpm
python3-yubico-1.3.2-9.module+el8.1.0+5409+d30b476c.noarch.rpm
slapi-nis-0.56.3-2.module+el8.1.0+5409+d30b476c.aarch64.rpm
softhsm-2.4.0-2.module+el8.1.0+5409+d30b476c.aarch64.rpm
softhsm-devel-2.4.0-2.module+el8.1.0+5409+d30b476c.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/bind-dyndb-ldap-11.1-14.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/custodia-0.6.0-3.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/ipa-4.8.0-13.0.1.module+el8.1.0+5456+194e3f77.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/ipa-healthcheck-0.3-4.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/ipa-idoverride-memberof-0.0.4-6.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/opendnssec-1.4.14-1.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/python-jwcrypto-0.5.0-1.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/python-kdcproxy-0.4-3.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/python-qrcode-5.1-12.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/python-yubico-1.3.2-9.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/pyusb-1.0.0-9.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/slapi-nis-0.56.3-2.module+el8.1.0+5409+d30b476c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/softhsm-2.4.0-2.module+el8.1.0+5409+d30b476c.src.rpm

Description of changes:

bind-dyndb-ldap
[11.1-14]
- Fix attribute templating in case of a missing default value
- Resolves: rhbz#1741896

custodia
[0.6.0-3]
- Require platform-python-setuptools instead of python3-setuptools
- Resolves: rhbz#1650508

ipa
[4.8.0-13.0.1]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

[4.8.0-13]
- CVE-2019-14867: Denial of service in IPA server due to wrong use of 
ber_scanf()
Resolves: RHBZ#1767303
- CVE-2019-10195: Don't log passwords embedded in commands in calls 
using batch
Resolves: RHBZ#1728125

[4.8.0-12]
- Do not run trust upgrade code if master lacks Samba bindings
Resolves: RHBZ#1773516

ipa-healthcheck
[0.3-4]
- Lookup AD user by SID and not by hardcoded username (#1739500)

[0.3-3]
- The AD trust agent and controller are not being initialized (#1738314)

[0.3-2]
- Change DNA plugin to return WARNING if no range is set (#1737492)

[0.3-1]
- Update to upstream 0.3 (#1701351)
- Add logrotate configs + depend on anacron and logrotate (#1729207)

[0.2-4]
- Fix ipa-healthcheck.sh installation path (rhbz#1729188)
- Create and own log directory (rhbz#1729188)

[0.2-3]
- Add python3-lib389 to BRs

[0.2-2]
- Fix changelog

[0.2-1]
- Update to upstream 0.2

[0.1-2]
- Explicitly list dependencies

[0.1-1]
- Initial package import

slapi-nis
[0.56.3-2]
- Resolves rhbz#1741881
ns-slapd is crashing intermittently

[0.56.3-1]
- New upstream release
- Resolves rhbz#1684563