RHSA-2024:0144MediumCVSS 6.5

Red Hat Security Advisory: idm:DL1 security update

Published
January 10, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2023-5455 →

📋 Description

CVE-2023-5455 — ipa: Invalid CSRF protection

🎯 Affected products188

  • Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • bind-dyndb-ldap-0:11.2-3.module+el8.2.0+4921+923e30d5.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • bind-dyndb-ldap-0:11.2-3.module+el8.2.0+4921+923e30d5.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • bind-dyndb-ldap-0:11.2-3.module+el8.2.0+4921+923e30d5.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • bind-dyndb-ldap-0:11.2-3.module+el8.2.0+4921+923e30d5.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • bind-dyndb-ldap-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • bind-dyndb-ldap-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • bind-dyndb-ldap-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • bind-dyndb-ldap-debuginfo-0:11.2-3.module+el8.2.0+4921+923e30d5.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • bind-dyndb-ldap-debuginfo-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • bind-dyndb-ldap-debuginfo-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • bind-dyndb-ldap-debuginfo-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • bind-dyndb-ldap-debugsource-0:11.2-3.module+el8.2.0+4921+923e30d5.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • bind-dyndb-ldap-debugsource-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • bind-dyndb-ldap-debugsource-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • bind-dyndb-ldap-debugsource-0:11.2-3.module+el8.2.0+4921+923e30d5.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.noarch (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.noarch (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.noarch (idm:DL1) as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • ipa-0:4.8.4-14.module+el8.2.0+20745+1d1ce1ed.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • ipa-0:4.8.4-14.module+el8.2.0+20745+1d1ce1ed.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • ipa-0:4.8.4-14.module+el8.2.0+20745+1d1ce1ed.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream TUS (v. 8.2)
  • ipa-client-0:4.8.4-14.module+el8.2.0+20745+1d1ce1ed.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • ipa-client-0:4.8.4-14.module+el8.2.0+20745+1d1ce1ed.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • ipa-client-0:4.8.4-14.module+el8.2.0+20745+1d1ce1ed.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.2)
  • +158 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)