ELSA-2026-70564

ELSA-2026-70564 - ipa security, bug fix, and enhancement update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-09-24

Description

[4.13.4-1.0.1]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
- Add bind to ipa-server-common Requires [Orabug: 36518596]

[4.13.4-1]
- RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z]
- RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z]
- RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z]
- RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z]
- RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z]
- RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z]
- RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in /ipa/migration/migration.py via Unbounded Request Body Read [rhel-9.8.z]
- RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in /ipa/i18n_messages via Unbounded Request Body Read [rhel-9.8.z]
- RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z]
- RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z]
- RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z]
- RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z]

[4.13.1-3.2]
- Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z]

[4.13.1-3.1]
- Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z]
- Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z]
- Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z]
- Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version

Related CVEs

CVE-2026-11861

CVE-2026-13097

CVE-2026-18147

CVE-2026-19550

CVE-2026-73197

CVE-2026-73198

CVE-2026-76578

CVE-2026-79678

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	ipa-4.13.4-1.0.1.el9_8.src.rpm	9dfcd7bfc8f3da2ced3621d1bdf04cd6edb32d7011b77e4cfb9281e51fe2f2c2	-	ol9_aarch64_appstream
	ipa-4.13.4-1.0.1.el9_8.src.rpm	9dfcd7bfc8f3da2ced3621d1bdf04cd6edb32d7011b77e4cfb9281e51fe2f2c2	-	ol9_aarch64_codeready_builder
	ipa-client-4.13.4-1.0.1.el9_8.aarch64.rpm	fe5c58320d9ac5fe71b0069f1e8e35064961ddaea60354ed45de05bfbf30536a	-	ol9_aarch64_appstream
	ipa-client-common-4.13.4-1.0.1.el9_8.noarch.rpm	893f27c2a3d9ee67e287fc4c3c596208778622a4503b5819916adbe8160ee213	-	ol9_aarch64_appstream
	ipa-client-encrypted-dns-4.13.4-1.0.1.el9_8.aarch64.rpm	1843e2ea53144ead9d2b4a1019c237871d9ef4b3b9686452b89f9f5c3a42ff57	-	ol9_aarch64_appstream
	ipa-client-epn-4.13.4-1.0.1.el9_8.aarch64.rpm	e82bfebc3e2e3ef0496c8ef44bce5727ebad50284787dd8b35c5c96d2ee60e98	-	ol9_aarch64_appstream
	ipa-client-samba-4.13.4-1.0.1.el9_8.aarch64.rpm	3c876798e1c2e139befde4a0b6cba65eee256053f8bf23660f4a2976b03e10d3	-	ol9_aarch64_appstream
	ipa-common-4.13.4-1.0.1.el9_8.noarch.rpm	50b3666c2b61dca12c367ec853a46a5e162d39f146781a8a9433f7ef6aaedd83	-	ol9_aarch64_appstream
	ipa-selinux-4.13.4-1.0.1.el9_8.noarch.rpm	0d6e67419af1a88b9e66e29c50736407bd4379026ca5c6aa2970d1369f1574f0	-	ol9_aarch64_appstream
	ipa-selinux-luna-4.13.4-1.0.1.el9_8.noarch.rpm	351e62712a37ab0e3d63f43c49b17af5c1c45853a6f139cfa4b964ce25517749	-	ol9_aarch64_appstream
	ipa-selinux-nfast-4.13.4-1.0.1.el9_8.noarch.rpm	6c73cdb352fafe042a277fd7a75257b04bbc2b049647fab1bccb82a4da10ff86	-	ol9_aarch64_appstream
	ipa-server-4.13.4-1.0.1.el9_8.aarch64.rpm	85ebeb48fc93f97a5b9eed7624c235709508980d3b19d878688907357e249190	-	ol9_aarch64_appstream
	ipa-server-common-4.13.4-1.0.1.el9_8.noarch.rpm	f0af618937a0b3836060077fa7be25d27f40e4d995a11ba46ce9647de86a8512	-	ol9_aarch64_appstream
	ipa-server-dns-4.13.4-1.0.1.el9_8.noarch.rpm	0e100d393d4d64ea4746a3cd280e97ae822512a4a6ef04e6138ba5d310481e98	-	ol9_aarch64_appstream
	ipa-server-encrypted-dns-4.13.4-1.0.1.el9_8.aarch64.rpm	c712ff96db9cf7b93108c319a74255c0bd73781b64b89cc70d4cc914cf3db420	-	ol9_aarch64_appstream
	ipa-server-trust-ad-4.13.4-1.0.1.el9_8.aarch64.rpm	f340ed98dc4c7558f0bafb7a462916cee292f11b6e449da43f3b762cdf6d98ea	-	ol9_aarch64_appstream
	python3-ipaclient-4.13.4-1.0.1.el9_8.noarch.rpm	915e787f005b78f04bbcf74b9d30867a662d3c346f7d478503844bb49dc4a945	-	ol9_aarch64_appstream
	python3-ipalib-4.13.4-1.0.1.el9_8.noarch.rpm	9502d949393d2c27f41163dce992c6bbe74c035df6802310dde0ca61d75f8e44	-	ol9_aarch64_appstream
	python3-ipaserver-4.13.4-1.0.1.el9_8.noarch.rpm	89f7e613001b7fb2c478ed3cd248731ac6ce1d79af7cca0f667b5ddbd60025e5	-	ol9_aarch64_appstream
	python3-ipatests-4.13.4-1.0.1.el9_8.noarch.rpm	488434e177b24f97cf9cd8c1398c4c8be05dd7760dbcf55481d1478f46122e10	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	ipa-4.13.4-1.0.1.el9_8.src.rpm	9dfcd7bfc8f3da2ced3621d1bdf04cd6edb32d7011b77e4cfb9281e51fe2f2c2	-	ol9_x86_64_appstream
	ipa-4.13.4-1.0.1.el9_8.src.rpm	9dfcd7bfc8f3da2ced3621d1bdf04cd6edb32d7011b77e4cfb9281e51fe2f2c2	-	ol9_x86_64_codeready_builder
	ipa-client-4.13.4-1.0.1.el9_8.x86_64.rpm	cbeb345975acd5abe10a8e737c8318b03d9baecda3168da276c753e2a2c529ae	-	ol9_x86_64_appstream
	ipa-client-common-4.13.4-1.0.1.el9_8.noarch.rpm	893f27c2a3d9ee67e287fc4c3c596208778622a4503b5819916adbe8160ee213	-	ol9_x86_64_appstream
	ipa-client-encrypted-dns-4.13.4-1.0.1.el9_8.x86_64.rpm	bd9aef4db5c1685c86ba644476444c6485961cd75722c74ef3617bb022bab922	-	ol9_x86_64_appstream
	ipa-client-epn-4.13.4-1.0.1.el9_8.x86_64.rpm	860742c68173b1a7a2c8a77b2ca9eff7e3336643205419600979fbbab41fd20c	-	ol9_x86_64_appstream
	ipa-client-samba-4.13.4-1.0.1.el9_8.x86_64.rpm	2d4ed4becebd1df6e317aa00e633804f8d26489fc9acbaa9821b757ecdc44373	-	ol9_x86_64_appstream
	ipa-common-4.13.4-1.0.1.el9_8.noarch.rpm	50b3666c2b61dca12c367ec853a46a5e162d39f146781a8a9433f7ef6aaedd83	-	ol9_x86_64_appstream
	ipa-selinux-4.13.4-1.0.1.el9_8.noarch.rpm	0d6e67419af1a88b9e66e29c50736407bd4379026ca5c6aa2970d1369f1574f0	-	ol9_x86_64_appstream
	ipa-selinux-luna-4.13.4-1.0.1.el9_8.noarch.rpm	351e62712a37ab0e3d63f43c49b17af5c1c45853a6f139cfa4b964ce25517749	-	ol9_x86_64_appstream
	ipa-selinux-nfast-4.13.4-1.0.1.el9_8.noarch.rpm	6c73cdb352fafe042a277fd7a75257b04bbc2b049647fab1bccb82a4da10ff86	-	ol9_x86_64_appstream
	ipa-server-4.13.4-1.0.1.el9_8.x86_64.rpm	3d90ce56fc43f1e01c34c5269243ae3a52f83a069283a473a8ac002e6e4b67f1	-	ol9_x86_64_appstream
	ipa-server-common-4.13.4-1.0.1.el9_8.noarch.rpm	f0af618937a0b3836060077fa7be25d27f40e4d995a11ba46ce9647de86a8512	-	ol9_x86_64_appstream
	ipa-server-dns-4.13.4-1.0.1.el9_8.noarch.rpm	0e100d393d4d64ea4746a3cd280e97ae822512a4a6ef04e6138ba5d310481e98	-	ol9_x86_64_appstream
	ipa-server-encrypted-dns-4.13.4-1.0.1.el9_8.x86_64.rpm	b576f82e4af25ee7614c99c8bac2fa1aca4f579dcff3994ebe82cee6561fa14c	-	ol9_x86_64_appstream
	ipa-server-trust-ad-4.13.4-1.0.1.el9_8.x86_64.rpm	6d5853ae3a4ada4dc1cb07a91fa571d6508f0f00646c4119a52416b92e5933b6	-	ol9_x86_64_appstream
	python3-ipaclient-4.13.4-1.0.1.el9_8.noarch.rpm	915e787f005b78f04bbcf74b9d30867a662d3c346f7d478503844bb49dc4a945	-	ol9_x86_64_appstream
	python3-ipalib-4.13.4-1.0.1.el9_8.noarch.rpm	9502d949393d2c27f41163dce992c6bbe74c035df6802310dde0ca61d75f8e44	-	ol9_x86_64_appstream
	python3-ipaserver-4.13.4-1.0.1.el9_8.noarch.rpm	89f7e613001b7fb2c478ed3cd248731ac6ce1d79af7cca0f667b5ddbd60025e5	-	ol9_x86_64_appstream
	python3-ipatests-4.13.4-1.0.1.el9_8.noarch.rpm	488434e177b24f97cf9cd8c1398c4c8be05dd7760dbcf55481d1478f46122e10	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team