[Freeipa] [Bug 1717356] [NEW] CVE-2016-6298

2017-09-14 Thread Brian Morton
*** This bug is a security vulnerability *** Public security bug reported: The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million

[Freeipa] [Bug 1693154] Update Released

2017-09-14 Thread Brian Murray
The verification of the Stable Release Update for freeipa has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a

[Freeipa] [Bug 1693154] Re: ipa-client-install fails: kinit: Included profile directory could not be read while initializing Kerberos 5 library

2017-09-14 Thread Launchpad Bug Tracker
This bug was fixed in the package freeipa - 4.4.3-3ubuntu2.1 --- freeipa (4.4.3-3ubuntu2.1) zesty; urgency=medium * client.dirs: Ship /etc/krb5.conf.d, because not having that breaks the installer when krb5.conf tries to include it. (LP: #1693154) -- Timo Aaltonen

[Freeipa] [Bug 1693154] Re: ipa-client-install fails: kinit: Included profile directory could not be read while initializing Kerberos 5 library

2017-09-14 Thread Martin Pitt
Using the reproduction steps in the description, I re-confirmed that with the current zesty version joining the domain fails because of that missing directory. After installing freeipa-{client,common} from -proposed, joining the domain now succeeds. ** Tags removed: verification-needed-zesty **