Packages / Debian 13 (Trixie) / net / freeipa-client

Package: freeipa-client (4.12.4-1)

FreeIPA centralized identity framework -- client

Other Packages Related to freeipa-client:

dep: [bind9-utils]
Utilità per BIND 9
dep: [certmonger] (>= 0.79.14)
D-Bus -based service to simplify interaction with certificate authorities
dep: [curl]
strumento a riga di comando per trasferire dati con sintassi URL
dep: [bind9-dnsutils]
Client forniti con BIND 9
dep: [freeipa-common] (= 4.12.4-1)
FreeIPA centralized identity framework -- common files
dep: [krb5-user]
programmi di base per autenticarsi con MIT Kerberos
dep: [libnss3-tools]
Strumenti di Network Security Service
dep: [libnss-sss]
Nss library for the System Security Services Daemon
dep: [libpam-sss]
Pam module for the System Security Services Daemon
dep: [libsasl2-modules-gssapi-mit]
Cyrus SASL - pluggable authentication modules (GSSAPI)
dep: [libsss-sudo]
Communicator library for sudo
dep: [oddjob-mkhomedir]
Oddjob helper which creates and populates home directories
dep: [python3-dnspython]
DNS toolkit for Python 3
dep: [python3-ipaclient] (= 4.12.4-1)
FreeIPA centralized identity framework -- Python3 modules for ipaclient
dep: [python3-gssapi]
Python 3 interface to GSSAPI
dep: [python3-ldap]
LDAP interface module for Python3
dep: [python3-sss]
Python3 module for the System Security Services Daemon
dep: [sssd] (>= 2.8.0)
System Security Services Daemon -- metapackage
dep: [python3] [any]
interactive high-level object-oriented language (default python3 version)
dep: [libc6] (>= 2.34)
GNU C Library: Shared libraries
dep: [libcom-err2] (>= 1.43.9)
common error description library
dep: [libcurl4t64] (>= 7.16.2)
libreria di trasferimento URL lato client facile da usare (variante OpenSSL)
dep: [libini-config5t64] (>= 0.4.0)
INI file parser for C
dep: [libjansson4] (>= 2.14)
C library for encoding, decoding and manipulating JSON data
dep: [libk5crypto3] (>= 1.20)
Librerie runtime MIT Kerberos - Crypto Library
dep: [libkrb5-3] (>= 1.13~alpha1+dfsg)
Librerie di runtime MIT Kerberos
dep: [libldap2] (>= 2.6.2)
Librerie OpenLDAP
dep: [libpopt0] (>= 1.14)
lib for parsing cmdline parameters
dep: [libssl3t64] (>= 3.0.0)
toolkit Secure Sockets Layer - librerie condivise

rec: [chrony]
Versatile implementation of the Network Time Protocol
rec: [sssd-passkey]
System Security Services Daemon -- passkey helpers and plugins

sug: [libnss-myhostname]
nss module providing fallback resolution for the current hostname
sug: [libpam-krb5]
PAM module for MIT Kerberos

Download freeipa-client

Architecture	Package size	Installed size	Files	Package
amd64	105 KiB	297 KiB	list of files	Download
arm64	99 KiB	432 KiB	list of files	Download

Percorsi file del pacchetto (25)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/etc/default/certmonger
/usr/bin/ipa
/usr/lib/ipa/acme/certbot-dns-ipa
/usr/lib/tmpfiles.d/freeipa-client.conf
/usr/sbin/ipa-certupdate
/usr/sbin/ipa-client-automount
/usr/sbin/ipa-client-install
/usr/sbin/ipa-getkeytab
/usr/sbin/ipa-join
/usr/sbin/ipa-rmkeytab
/usr/share/bash-completion/completions/ipa
/usr/share/doc/freeipa-client/changelog.Debian.gz
/usr/share/doc/freeipa-client/copyright
/usr/share/ipa/client/freeipa.template
/usr/share/ipa/client/sshd_ipa.conf.template
/usr/share/ipa/client/ssh_ipa.conf.template
/usr/share/lintian/overrides/freeipa-client
/usr/share/man/man1/ipa.1.gz
/usr/share/man/man1/ipa-certupdate.1.gz
/usr/share/man/man1/ipa-client-automount.1.gz
/usr/share/man/man1/ipa-client-install.1.gz
/usr/share/man/man1/ipa-getkeytab.1.gz
/usr/share/man/man1/ipa-join.1.gz
/usr/share/man/man1/ipa-rmkeytab.1.gz
/usr/share/man/man5/default.conf.5.gz

Field source: Debian 13 (Trixie) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 13 (Trixie) nel browser Crea un'immagine che include freeipa-client

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
4.12.4-1	trixie / main	amd64	Debian 13 · main · amd64	105 KiB	297 KiB	pool/main/f/freeipa/freeipa-client_4.12.4-1_amd64.deb
4.12.4-1	trixie / main	arm64	Debian 13 · main · arm64	99 KiB	432 KiB	pool/main/f/freeipa/freeipa-client_4.12.4-1_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-115221] freeipa: CVE-2026-115221	Medium(5.4)	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata dsa · freeipa · debian · 13
[CVE-2026-53683] reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No vali	Medium(4.3)	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata nvd · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata nvd · freeipa · debian · 13
[CVE-2026-73199] A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol (	Medium(6.5)	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata nvd · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata nvd · freeipa · debian · 13
[CVE-2026-73196] A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-e	Medium(4.3)	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata nvd · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata nvd · freeipa · debian · 13
[CVE-2026-14612] Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access when processing an oversized response from a configured external OAuth2	Medium(4.2)	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata nvd · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata nvd · freeipa · debian · 13
[CVE-2019-14826] freeipa: CVE-2019-14826	Low	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata dsa · freeipa · debian · 13
[CVE-2017-12169] freeipa: CVE-2017-12169	Low	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata dsa · freeipa · debian · 13
[CVE-2015-5179] freeipa: CVE-2015-5179	Low	Interessata Dettagli (2) `4.12.4-1` · amd64 · trixie Interessata dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Interessata dsa · freeipa · debian · 13

Versioni corrette e non interessate (8)

CVE	Gravità	Impatto per versione
[CVE-2020-1722] freeipa: CVE-2020-1722	Medium(5.3)	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.8.8-2` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.8.8-2` dsa · freeipa · debian · 13
[CVE-2019-14867] freeipa: CVE-2019-14867	High(8.8)	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.8.3-1` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.8.3-1` dsa · freeipa · debian · 13
[CVE-2019-10195] freeipa: CVE-2019-10195	Medium(5.7)	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.8.3-1` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.8.3-1` dsa · freeipa · debian · 13
[CVE-2016-7030] freeipa: CVE-2016-7030	High(7.5)	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.4.4-1` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.4.4-1` dsa · freeipa · debian · 13
[CVE-2016-9575] freeipa: CVE-2016-9575	Medium(6.3)	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.4.4-1` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.4.4-1` dsa · freeipa · debian · 13
[CVE-2016-5404] freeipa: CVE-2016-5404	Medium(4.3)	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.3.2-5` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.3.2-5` dsa · freeipa · debian · 13
[CVE-2014-7850] freeipa: CVE-2014-7850	Low	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.3.1-1` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.3.1-1` dsa · freeipa · debian · 13
[CVE-2014-7828] freeipa: CVE-2014-7828	Medium	Corretta Dettagli (2) `4.12.4-1` · amd64 · trixie Corretta · Corretta: `4.0.5-1` dsa · freeipa · debian · 13 `4.12.4-1` · arm64 · trixie Corretta · Corretta: `4.0.5-1` dsa · freeipa · debian · 13

Ultima sincronizzazione: Oct 24, 2026, 7:27:28 AM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.12.4-1 / amd64Osservato Sep 1, 2026sha256 b18b811fd392…fcfc74d1Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): b18b811fd392662b3835ab26b132161c3e21bfbd2be55ed1462e891efcfc74d1

Verifica download

printf '%s  %s\n' 'b18b811fd392662b3835ab26b132161c3e21bfbd2be55ed1462e891efcfc74d1' 'freeipa-client_4.12.4-1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

4.12.4-1 / arm64Osservato Sep 1, 2026sha256 d11ccf8bf1bf…4909b563Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): d11ccf8bf1bfe4873bc1fccd4538298b60028e66bca7dca1dcf5b9714909b563

Verifica download

printf '%s  %s\n' 'd11ccf8bf1bfe4873bc1fccd4538298b60028e66bca7dca1dcf5b9714909b563' 'freeipa-client_4.12.4-1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Fonti

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified