# RHSA-2024:0143: Security update for 30 packages RHSA-2024:0143, released January 10, 2024, fixes 2 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2024-0143 - Platform: Linux - Released: Jan 10, 2024 - Priority: High (Closes CVE-2020-17049, high severity) - CVEs: 2, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2024:0143 ## Applies to | Product | Release | Fixed in | |---|---|---| | [bind-dyndb-ldap](https://patchblox.com/security/data/product/linux/bind-dyndb-ldap.md) | RHEL 8 | 0:11.6-4.module+el8.9.0+18911+94941f82 | | [custodia](https://patchblox.com/security/data/product/linux/custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | | [ipa-client](https://patchblox.com/security/data/product/linux/ipa-client.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-client-common](https://patchblox.com/security/data/product/linux/ipa-client-common.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-client-epn](https://patchblox.com/security/data/product/linux/ipa-client-epn.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-client-samba](https://patchblox.com/security/data/product/linux/ipa-client-samba.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-common](https://patchblox.com/security/data/product/linux/ipa-common.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-healthcheck](https://patchblox.com/security/data/product/linux/ipa-healthcheck.md) | RHEL 8 | 0:0.12-3.module+el8.9.0+19634+c162f948 | | [ipa-healthcheck-core](https://patchblox.com/security/data/product/linux/ipa-healthcheck-core.md) | RHEL 8 | 0:0.12-3.module+el8.9.0+19634+c162f948 | | [ipa-python-compat](https://patchblox.com/security/data/product/linux/ipa-python-compat.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-selinux](https://patchblox.com/security/data/product/linux/ipa-selinux.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-server](https://patchblox.com/security/data/product/linux/ipa-server.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-server-common](https://patchblox.com/security/data/product/linux/ipa-server-common.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-server-dns](https://patchblox.com/security/data/product/linux/ipa-server-dns.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [ipa-server-trust-ad](https://patchblox.com/security/data/product/linux/ipa-server-trust-ad.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [opendnssec](https://patchblox.com/security/data/product/linux/opendnssec.md) | RHEL 8 | 0:2.1.7-1.module+el8.9.0+18911+94941f82 | | [python3-custodia](https://patchblox.com/security/data/product/linux/python3-custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | | [python3-ipaclient](https://patchblox.com/security/data/product/linux/python3-ipaclient.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [python3-ipalib](https://patchblox.com/security/data/product/linux/python3-ipalib.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [python3-ipaserver](https://patchblox.com/security/data/product/linux/python3-ipaserver.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [python3-ipatests](https://patchblox.com/security/data/product/linux/python3-ipatests.md) | RHEL 8 | 0:4.9.12-11.module+el8.9.0+20824+f2605038 | | [python3-jwcrypto](https://patchblox.com/security/data/product/linux/python3-jwcrypto.md) | RHEL 8 | 0:0.5.0-1.1.module+el8.9.0+18911+94941f82 | | [python3-kdcproxy](https://patchblox.com/security/data/product/linux/python3-kdcproxy.md) | RHEL 8 | 0:0.4-5.module+el8.9.0+18911+94941f82 | | [python3-pyusb](https://patchblox.com/security/data/product/linux/python3-pyusb.md) | RHEL 8 | 0:1.0.0-9.1.module+el8.9.0+18911+94941f82 | | [python3-qrcode](https://patchblox.com/security/data/product/linux/python3-qrcode.md) | RHEL 8 | 0:5.1-12.module+el8.9.0+18911+94941f82 | | [python3-qrcode-core](https://patchblox.com/security/data/product/linux/python3-qrcode-core.md) | RHEL 8 | 0:5.1-12.module+el8.9.0+18911+94941f82 | | [python3-yubico](https://patchblox.com/security/data/product/linux/python3-yubico.md) | RHEL 8 | 0:1.3.2-9.1.module+el8.9.0+18911+94941f82 | | [slapi-nis](https://patchblox.com/security/data/product/linux/slapi-nis.md) | RHEL 8 | 0:0.60.0-4.module+el8.9.0+20420+fef9eb45 | | [softhsm](https://patchblox.com/security/data/product/linux/softhsm.md) | RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | | [softhsm-devel](https://patchblox.com/security/data/product/linux/softhsm-devel.md) | RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-17049](https://patchblox.com/security/data/cve/CVE-2020-17049.md) | High | Kerberos KDC Security Feature Bypass Vulnerability | 7.2 | 0.1379 | | | [CVE-2023-5455](https://patchblox.com/security/data/cve/CVE-2023-5455.md) | High | bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... | 7.2 | 0.0057 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo