Packages / Debian 12 (Bookworm) / net / freeipa-client

Package: freeipa-client (4.9.11-1)

FreeIPA centralized identity framework -- client

Other Packages Related to freeipa-client:

dep: [bind9-utils]
Hilfsprogramme für BIND 9
dep: [certmonger] (>= 0.79.5-2)
D-Bus -based service to simplify interaction with certificate authorities
dep: [curl]
Kommandozeilenwerkzeug zum Übertragen von Daten mit URL-Syntax
dep: [dnsutils]
Transitional package for bind9-dnsutils
dep: [freeipa-common] (= 4.9.11-1)
FreeIPA centralized identity framework -- common files
dep: [krb5-user]
grundlegende Programme zur Authentifizierung mit MIT Kerberos
dep: [libnss3-tools]
Werkzeuge für Network Security Service
dep: [libnss-sss]
Nss library for the System Security Services Daemon
dep: [libpam-sss]
Pam module for the System Security Services Daemon
dep: [libsasl2-modules-gssapi-mit]
Cyrus SASL - pluggable authentication modules (GSSAPI)
dep: [libsss-sudo]
Communicator library for sudo
dep: [oddjob-mkhomedir]
Oddjob helper which creates and populates home directories
dep: [python3-dnspython]
DNS toolkit for Python 3
dep: [python3-ipaclient] (= 4.9.11-1)
FreeIPA centralized identity framework -- Python3 modules for ipaclient
dep: [python3-gssapi]
Python 3 interface to GSSAPI
dep: [python3-ldap]
LDAP interface module for Python3
dep: [python3-sss]
Python3 module for the System Security Services Daemon
dep: [sssd] (>= 1.14.0)
System Security Services Daemon -- metapackage
dep: [python3] [any]
interactive high-level object-oriented language (default python3 version)
dep: [libc6] (>= 2.34)
GNU C Library: Shared libraries
dep: [libcom-err2] (>= 1.43.9)
common error description library
dep: [libcurl4] (>= 7.16.2)
einfach zu verwendende clientseitige URL-Transfer-Bibliothek (OpenSSL-Variante)
dep: [libini-config5] (>= 0.4.0)
INI file parser for C
dep: [libjansson4] (>= 2.14)
C library for encoding, decoding and manipulating JSON data
dep: [libk5crypto3] (>= 1.20)
MIT Kerberos-Laufzeitbibliotheken - Crypto Library
dep: [libkrb5-3] (>= 1.13~alpha1+dfsg)
MIT Kerberos-Laufzeitbibliotheken
dep: [libldap-2.5-0] (>= 2.5.4)
OpenLDAP-Bibliotheken
dep: [libpopt0] (>= 1.14)
lib for parsing cmdline parameters
dep: [libssl3] (>= 3.0.0)
Secure Sockets Layer-Toolkit – gemeinsam genutzte Bibliotheken

rec: [chrony]
Versatile implementation of the Network Time Protocol

sug: [libpam-krb5]
PAM module for MIT Kerberos

Download freeipa-client

Architecture	Package size	Installed size	Files	Package
amd64	101 KiB	283 KiB	list of files	Download
arm64	95 KiB	365 KiB	list of files	Download

Paketdateipfade (24)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/etc/default/certmonger
/usr/bin/ipa
/usr/lib/ipa/acme/certbot-dns-ipa
/usr/lib/tmpfiles.d/freeipa-client.conf
/usr/sbin/ipa-certupdate
/usr/sbin/ipa-client-automount
/usr/sbin/ipa-client-install
/usr/sbin/ipa-getkeytab
/usr/sbin/ipa-join
/usr/sbin/ipa-rmkeytab
/usr/share/doc/freeipa-client/changelog.Debian.gz
/usr/share/doc/freeipa-client/copyright
/usr/share/ipa/client/freeipa.template
/usr/share/ipa/client/sshd_ipa.conf.template
/usr/share/ipa/client/ssh_ipa.conf.template
/usr/share/lintian/overrides/freeipa-client
/usr/share/man/man1/ipa.1.gz
/usr/share/man/man1/ipa-certupdate.1.gz
/usr/share/man/man1/ipa-client-automount.1.gz
/usr/share/man/man1/ipa-client-install.1.gz
/usr/share/man/man1/ipa-getkeytab.1.gz
/usr/share/man/man1/ipa-join.1.gz
/usr/share/man/man1/ipa-rmkeytab.1.gz
/usr/share/man/man5/default.conf.5.gz

Field source: Debian 12 (Bookworm) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 12 (Bookworm) im Browser testen Image mit freeipa-client bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
4.9.11-1	bookworm / main	amd64	Debian 12 · main · amd64	101 KiB	283 KiB	pool/main/f/freeipa/freeipa-client_4.9.11-1_amd64.deb
4.9.11-1	bookworm / main	arm64	Debian 12 · main · arm64	95 KiB	365 KiB	pool/main/f/freeipa/freeipa-client_4.9.11-1_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVE	Schweregrad	Betroffene Versionen
[CVE-2026-115221] freeipa: CVE-2026-115221	Medium(5.4)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen dsa · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen dsa · freeipa · debian · bookworm
[CVE-2026-18147] A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to clic	High(8.1)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-79678] A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is en	High(8.1)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-76578] A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP clien	Critical(9.8)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-53683] reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No vali	Medium(4.3)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12
[CVE-2026-73199] A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol (	Medium(6.5)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12
[CVE-2026-73196] A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-e	Medium(4.3)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12
[CVE-2026-11861] A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal,	Critical(9.6)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-73198] A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This can cause the servic	High(7.5)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-13097] A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent repre	Critical(9.1)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-73197] A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the	High(7.5)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-19550] A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privil	High(8.2)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm
[CVE-2026-14612] Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access when processing an oversized response from a configured external OAuth2	Medium(4.2)	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Betroffen nvd · freeipa · debian · bookworm; nvd · freeipa · debian · 12
[CVE-2019-14826] freeipa: CVE-2019-14826	Low	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Betroffen dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[CVE-2017-12169] freeipa: CVE-2017-12169	Low	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Betroffen dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[CVE-2015-5179] freeipa: CVE-2015-5179	Low	Betroffen Details (2) `4.9.11-1` · amd64 · bookworm Betroffen dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Betroffen dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12

Behobene und nicht betroffene Versionen (4)

CVE	Schweregrad	Betroffene Versionen
[CVE-2020-1722] freeipa: CVE-2020-1722	Medium(5.3)	Behoben Details (2) `4.9.11-1` · amd64 · bookworm Behoben · Behoben: `4.8.8-2` dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Behoben · Behoben: `4.8.8-2` dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[CVE-2019-14867] freeipa: CVE-2019-14867	High(8.8)	Behoben Details (2) `4.9.11-1` · amd64 · bookworm Behoben · Behoben: `4.8.3-1` dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Behoben · Behoben: `4.8.3-1` dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[CVE-2019-10195] freeipa: CVE-2019-10195	Medium(5.7)	Behoben Details (2) `4.9.11-1` · amd64 · bookworm Behoben · Behoben: `4.8.3-1` dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12 `4.9.11-1` · arm64 · bookworm Behoben · Behoben: `4.8.3-1` dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[CVE-2017-2590] freeipa: CVE-2017-2590	High(8.1)	Nicht betroffen Details (2) `4.9.11-1` · amd64 · bookworm Nicht betroffen dsa · freeipa · debian · bookworm `4.9.11-1` · arm64 · bookworm Nicht betroffen dsa · freeipa · debian · bookworm

[Weitere Ergebnisse]

Zuletzt synchronisiert: Oct 24, 2026, 4:34:49 AM UTC

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.9.11-1 / amd64Beobachtet Sep 1, 2026sha256 1d57ac5b25da…a525087dPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 1d57ac5b25da8ff8f5ff47321b59a6b39ea0bc7641269c7404c07e80a525087d

Download prüfen

printf '%s  %s\n' '1d57ac5b25da8ff8f5ff47321b59a6b39ea0bc7641269c7404c07e80a525087d' 'freeipa-client_4.9.11-1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

4.9.11-1 / arm64Beobachtet Sep 1, 2026sha256 6e2d13960ab1…38065346Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 6e2d13960ab1bbecfb598834ab93464e595f630490396d08bff26f9138065346

Download prüfen

printf '%s  %s\n' '6e2d13960ab1bbecfb598834ab93464e595f630490396d08bff26f9138065346' 'freeipa-client_4.9.11-1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Quellen

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified