{"id":"CLSA-2026-1791544796","summary":"ipa: Fix of 4 CVEs","details":"- CVE-2026-11861: validate the PAC of cross-realm trust tickets in the KDB driver, including ID override checks\n- CVE-2026-13097: enforce Kerberos principal name uniqueness with a principal-aware matching rule (new ipa-krbprinc-mr 389-ds plugin)\n- CVE-2026-18147: remove the arbitrary URL redirect from the Web UI password reset page\n- CVE-2026-19550: require write access to the trust entry before refreshing trust domains\n- do not fail ipa-server or ipa-server-trust-ad removal on hosts without a running systemd,\n  such as container images: the dbus and oddjobd reload calls in the install and removal\n  scriptlets now tolerate failure, like the stop, disable and condrestart calls beside them","modified":"2026-10-26T09:30:07.877004434Z","published":"2026-10-09T14:02:25Z","upstream":["CVE-2026-11861","CVE-2026-13097","CVE-2026-18147","CVE-2026-19550"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791544796.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11861"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13097"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18147"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19550"}],"affected":[{"package":{"name":"ipa-client","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-client-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-client-epn","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client-epn?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-client-samba","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client-samba?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-python-compat","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-python-compat?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-selinux","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-selinux?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-server","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-server-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-server-dns","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server-dns?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"ipa-server-trust-ad","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server-trust-ad?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"python3-ipaclient","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipaclient?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"python3-ipalib","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipalib?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"python3-ipaserver","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipaserver?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}},{"package":{"name":"python3-ipatests","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipatests?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"}}],"schema_version":"1.9.0"}