openSUSE-SU-2024:0095-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0095-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2024:0095-1
Published
2024-03-30T19:01:00Z
Modified
2024-03-30T19:01:00Z
Summary
Security update for kanidm
Details

This update for kanidm fixes the following issues:

Update to version 1.1.0rc16git6.e51d0de:

  • [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  • return consent map to service account (#2604)
References

Affected packages

SUSE:Package Hub 15 SP5 / kanidm

Package

Name
kanidm
Purl
pkg:rpm/suse/kanidm&distro=SUSE%20Package%20Hub%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.0~rc16~git6.e51d0de-bp155.14.1

Ecosystem specific

{
    "binaries":  [
        {
            "kanidm":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-clients":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-docs":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-server":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-unixd-clients":  "1.1.0~rc16~git6.e51d0de-bp155.14.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0095-1.json"

openSUSE:Leap 15.5 / kanidm

Package

Name
kanidm
Purl
pkg:rpm/opensuse/kanidm&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.0~rc16~git6.e51d0de-bp155.14.1

Ecosystem specific

{
    "binaries":  [
        {
            "kanidm":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-clients":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-docs":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-server":  "1.1.0~rc16~git6.e51d0de-bp155.14.1",
            "kanidm-unixd-clients":  "1.1.0~rc16~git6.e51d0de-bp155.14.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2024:0095-1.json"