[CLSA-2026:1791563836] ipa: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-09 16:37:32 UTC
Description:
- CVE-2026-73197: limit the request body size of the unauthenticated migration endpoint - CVE-2026-73198: limit the request body size of the unauthenticated i18n_messages endpoint - CVE-2026-76578: harden default ACIs and permissions against unauthenticated and delegated privilege escalation - CVE-2026-79678: enforce managed permission checks in LDAP-oriented commands before privileged side effects
CVEs fixed:
Updated packages:
  • ipa-client-4.10.1-9.el9_2.alma.1.tuxcare.els5.aarch64.rpm
    sha:710cb8c45db50a38946e9a910e37a6a6061eb8d2acde31d57e5d21e5e0131abe
  • ipa-client-4.10.1-9.el9_2.alma.1.tuxcare.els5.i686.rpm
    sha:d9479571beb2f8f34ab9a215313178e5a57f6186fcae01b0cb00582c18587b1d
  • ipa-client-4.10.1-9.el9_2.alma.1.tuxcare.els5.x86_64.rpm
    sha:f8d8397fd689c8ae6f17c620c03fbcd3a922687de265fa715cd2d7901dbed1e5
  • ipa-client-common-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:b69239ca7211a7672bcf6f7b93e8caf7aae2fd0f64697d0972a0db7da338e14b
  • ipa-client-epn-4.10.1-9.el9_2.alma.1.tuxcare.els5.aarch64.rpm
    sha:0e7e4365bc11191a01a3532f95ac68e13798c58f355322ed769123ec8a6effda
  • ipa-client-epn-4.10.1-9.el9_2.alma.1.tuxcare.els5.i686.rpm
    sha:92c95cf756afe9e20abde59f7872ece8f8bcc659085a5896c306a89c45845bca
  • ipa-client-epn-4.10.1-9.el9_2.alma.1.tuxcare.els5.x86_64.rpm
    sha:4b6c1fe1302e4be11e01ffdb19336d22e1f56f17a689fa0126fb96b3584fe4fa
  • ipa-client-samba-4.10.1-9.el9_2.alma.1.tuxcare.els5.aarch64.rpm
    sha:ff6fcd9265b68b7d78699ae1fff7c52cc6328fe36e7a231462e087a8c033bcd1
  • ipa-client-samba-4.10.1-9.el9_2.alma.1.tuxcare.els5.i686.rpm
    sha:5a359c973026af8bea894219962fab78c4775a9eabaf2578ed9ff80bbbd981f8
  • ipa-client-samba-4.10.1-9.el9_2.alma.1.tuxcare.els5.x86_64.rpm
    sha:5ca52859839717effd24f95fa74e295f6f49d2015a7bab65904830b8764bc3e1
  • ipa-common-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:a51a05f07fcff78d3af92fda091f7b471ac5d58a235d49e018f20595e8a4491a
  • ipa-python-compat-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:50a143e29ebb39e1c136fcffce9247bb4da110c16f63d653702639fe44dc544d
  • ipa-selinux-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:b59e4818ed09c75cbbc16c5374bf609a617d93d9a8bbd638c9238ec8e7418d06
  • ipa-server-4.10.1-9.el9_2.alma.1.tuxcare.els5.aarch64.rpm
    sha:dfeb99d6ff325412a0245e2fc5f101e0e6b6932b15e757d4dd9c07794ca9c1ec
  • ipa-server-4.10.1-9.el9_2.alma.1.tuxcare.els5.x86_64.rpm
    sha:00c8298fd5649556ab893255bd58fc0dcd3b8ac07c17828519f4acea12a07feb
  • ipa-server-common-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:feea936c86e82822efd35352051b7334c2e2853d94c5f572ddeabefc4eaeba48
  • ipa-server-dns-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:d300c81a68f1fc9ad7f7f34aba1d7e41141fe57ac132bf37d49a27c658ecd54a
  • ipa-server-trust-ad-4.10.1-9.el9_2.alma.1.tuxcare.els5.aarch64.rpm
    sha:3867ba995d270bb1c2e355d0d276b0987f824126d9f53b2f13109173c3657dad
  • ipa-server-trust-ad-4.10.1-9.el9_2.alma.1.tuxcare.els5.x86_64.rpm
    sha:def4b44254bdfef4fea17fa6111ecd7b15f0f56714a2f871ad34d9670ec66402
  • python3-ipaclient-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:ea678f21ab8489025ed0289d4b9fa7898c3c790d14cfbc3e9056ea54eb6ff96b
  • python3-ipalib-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:e269374e1d11bb28a0701ad7b92c079e310bf044a1053889b36f83e6138fa631
  • python3-ipaserver-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:2b6ffcead008f1693031566717b5257eb19816b92b6363ee43337ba7a70632a3
  • python3-ipatests-4.10.1-9.el9_2.alma.1.tuxcare.els5.noarch.rpm
    sha:2325712e9b82594926e184de9a435619f396a5fcccfc3626508259329034f1c4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.