tocsin

Debian/freeipa: medium 5.3

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading t

Action: Upgrade freeipa to 4.8.8-2 or later.

Affected

introducedfixedlast affected
04.8.8-2-

Fixed versions

4.8.8-2

Sources

published · modified · JSON