Packages / Debian 13 (Trixie) / net / freeipa-client

[Source: freeipa]

Package: freeipa-client (4.12.4-1)

FreeIPA centralized identity framework -- client

Other Packages Related to freeipa-client:

  • dep: [bind9-utils]

    Hilfsprogramme für BIND 9

  • dep: [certmonger] (>= 0.79.14)

    D-Bus -based service to simplify interaction with certificate authorities

  • dep: [curl]

    Kommandozeilenwerkzeug zum Übertragen von Daten mit URL-Syntax

  • dep: [bind9-dnsutils]

    Mit BIND 9 bereitgestellte Clients

  • dep: [freeipa-common] (= 4.12.4-1)

    FreeIPA centralized identity framework -- common files

  • dep: [krb5-user]

    grundlegende Programme zur Authentifizierung mit MIT Kerberos

  • dep: [libnss3-tools]

    Werkzeuge für Network Security Service

  • dep: [libnss-sss]

    Nss library for the System Security Services Daemon

  • dep: [libpam-sss]

    Pam module for the System Security Services Daemon

  • dep: [libsasl2-modules-gssapi-mit]

    Cyrus SASL - pluggable authentication modules (GSSAPI)

  • dep: [libsss-sudo]

    Communicator library for sudo

  • dep: [oddjob-mkhomedir]

    Oddjob helper which creates and populates home directories

  • dep: [python3-dnspython]

    DNS toolkit for Python 3

  • dep: [python3-ipaclient] (= 4.12.4-1)

    FreeIPA centralized identity framework -- Python3 modules for ipaclient

  • dep: [python3-gssapi]

    Python 3 interface to GSSAPI

  • dep: [python3-ldap]

    LDAP interface module for Python3

  • dep: [python3-sss]

    Python3 module for the System Security Services Daemon

  • dep: [sssd] (>= 2.8.0)

    System Security Services Daemon -- metapackage

  • dep: [python3] [any]

    interactive high-level object-oriented language (default python3 version)

  • dep: [libc6] (>= 2.34)

    GNU C Library: Shared libraries

  • dep: [libcom-err2] (>= 1.43.9)

    common error description library

  • dep: [libcurl4t64] (>= 7.16.2)

    einfach zu verwendende clientseitige URL-Transfer-Bibliothek (OpenSSL-Variante)

  • dep: [libini-config5t64] (>= 0.4.0)

    INI file parser for C

  • dep: [libjansson4] (>= 2.14)

    C library for encoding, decoding and manipulating JSON data

  • dep: [libk5crypto3] (>= 1.20)

    MIT Kerberos-Laufzeitbibliotheken - Crypto Library

  • dep: [libkrb5-3] (>= 1.13~alpha1+dfsg)

    MIT Kerberos-Laufzeitbibliotheken

  • dep: [libldap2] (>= 2.6.2)

    OpenLDAP-Bibliotheken

  • dep: [libpopt0] (>= 1.14)

    lib for parsing cmdline parameters

  • dep: [libssl3t64] (>= 3.0.0)

    Secure Sockets Layer-Toolkit – gemeinsam genutzte Bibliotheken

  • rec: [chrony]

    Versatile implementation of the Network Time Protocol

  • rec: [sssd-passkey]

    System Security Services Daemon -- passkey helpers and plugins

Download freeipa-client

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64105 KiB297 KiBlist of filesDownload
arm6499 KiB432 KiBlist of filesDownload

Paketdateipfade (25)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/default/certmonger
  • /usr/bin/ipa
  • /usr/lib/ipa/acme/certbot-dns-ipa
  • /usr/lib/tmpfiles.d/freeipa-client.conf
  • /usr/sbin/ipa-certupdate
  • /usr/sbin/ipa-client-automount
  • /usr/sbin/ipa-client-install
  • /usr/sbin/ipa-getkeytab
  • /usr/sbin/ipa-join
  • /usr/sbin/ipa-rmkeytab
  • /usr/share/bash-completion/completions/ipa
  • /usr/share/doc/freeipa-client/changelog.Debian.gz
  • /usr/share/doc/freeipa-client/copyright
  • /usr/share/ipa/client/freeipa.template
  • /usr/share/ipa/client/sshd_ipa.conf.template
  • /usr/share/ipa/client/ssh_ipa.conf.template
  • /usr/share/lintian/overrides/freeipa-client
  • /usr/share/man/man1/ipa.1.gz
  • /usr/share/man/man1/ipa-certupdate.1.gz
  • /usr/share/man/man1/ipa-client-automount.1.gz
  • /usr/share/man/man1/ipa-client-install.1.gz
  • /usr/share/man/man1/ipa-getkeytab.1.gz
  • /usr/share/man/man1/ipa-join.1.gz
  • /usr/share/man/man1/ipa-rmkeytab.1.gz
  • /usr/share/man/man5/default.conf.5.gz

Field source: Debian 13 (Trixie) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 13 (Trixie) im Browser testenImage mit freeipa-client bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
4.12.4-1trixie / mainamd64Debian 13 · main · amd64105 KiB297 KiBpool/main/f/freeipa/freeipa-client_4.12.4-1_amd64.deb
4.12.4-1trixie / mainarm64Debian 13 · main · arm6499 KiB432 KiBpool/main/f/freeipa/freeipa-client_4.12.4-1_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-53683]

reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No vali

Medium(4.3)Betroffen
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

[CVE-2026-73199]

A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol (

Medium(6.5)Betroffen
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

[CVE-2026-73196]

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-e

Medium(4.3)Betroffen
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

[CVE-2026-14612]

Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access when processing an oversized response from a configured external OAuth2

Medium(4.2)Betroffen
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Betroffen

    nvd · freeipa · debian · 13

[CVE-2019-14826]

freeipa: CVE-2019-14826

LowBetroffen
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Betroffen

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Betroffen

    dsa · freeipa · debian · 13

[CVE-2017-12169]

freeipa: CVE-2017-12169

LowBetroffen
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Betroffen

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Betroffen

    dsa · freeipa · debian · 13

[CVE-2015-5179]

freeipa: CVE-2015-5179

LowBetroffen
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Betroffen

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Betroffen

    dsa · freeipa · debian · 13

Behobene und nicht betroffene Versionen (8)
CVESchweregradBetroffene Versionen
[CVE-2020-1722]

freeipa: CVE-2020-1722

Medium(5.3)Behoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.8.8-2

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.8.8-2

    dsa · freeipa · debian · 13

[CVE-2019-14867]

freeipa: CVE-2019-14867

High(8.8)Behoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.8.3-1

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.8.3-1

    dsa · freeipa · debian · 13

[CVE-2019-10195]

freeipa: CVE-2019-10195

Medium(5.7)Behoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.8.3-1

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.8.3-1

    dsa · freeipa · debian · 13

[CVE-2016-7030]

freeipa: CVE-2016-7030

High(7.5)Behoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.4.4-1

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.4.4-1

    dsa · freeipa · debian · 13

[CVE-2016-9575]

freeipa: CVE-2016-9575

Medium(6.3)Behoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.4.4-1

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.4.4-1

    dsa · freeipa · debian · 13

[CVE-2016-5404]

freeipa: CVE-2016-5404

Medium(4.3)Behoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.3.2-5

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.3.2-5

    dsa · freeipa · debian · 13

[CVE-2014-7850]

freeipa: CVE-2014-7850

LowBehoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.3.1-1

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.3.1-1

    dsa · freeipa · debian · 13

[CVE-2014-7828]

freeipa: CVE-2014-7828

MediumBehoben
Details (2)

  • 4.12.4-1 · amd64 · trixie

    Behoben · Behoben: 4.0.5-1

    dsa · freeipa · debian · 13

  • 4.12.4-1 · arm64 · trixie

    Behoben · Behoben: 4.0.5-1

    dsa · freeipa · debian · 13

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.12.4-1 / amd64Beobachtet Sep 1, 2026sha256 b18b811fd392…fcfc74d1Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): b18b811fd392662b3835ab26b132161c3e21bfbd2be55ed1462e891efcfc74d1

Download prüfen

printf '%s %s\n' 'b18b811fd392662b3835ab26b132161c3e21bfbd2be55ed1462e891efcfc74d1' 'freeipa-client_4.12.4-1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

4.12.4-1 / arm64Beobachtet Sep 1, 2026sha256 d11ccf8bf1bf…4909b563Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): d11ccf8bf1bfe4873bc1fccd4538298b60028e66bca7dca1dcf5b9714909b563

Download prüfen

printf '%s %s\n' 'd11ccf8bf1bfe4873bc1fccd4538298b60028e66bca7dca1dcf5b9714909b563' 'freeipa-client_4.12.4-1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Quellen

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified