PyPI/freeipa CVE-2019-10195: medium 6.5, EPSS 1.81%
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This in
Action: Upgrade freeipa to 4.6.7 or later.
pip install freeipa==4.6.7pip install freeipa==4.7.4pip install freeipa==4.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.1 | 4.6.7 | - |
| 4.7.0 | 4.7.4 | - |
| 4.8.0 | 4.8.3 | - |
Fixed versions
| 4.6.7 | 4.7.4 | 4.8.3 |
Sources
- osv: PYSEC-2019-22
- nvd: CVE-2019-10195
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10195
- https://www.freeipa.org/page/Releases/4.8.3
- https://www.freeipa.org/page/Releases/4.6.7
- https://www.freeipa.org/page/Releases/4.7.4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF/
- https://access.redhat.com/errata/RHSA-2020:0378
- https://access.redhat.com/errata/RHBA-2019:4268
CVE-2019-10195 · published · modified · JSON