{"id":"CLSA-2026-1791563836","summary":"ipa: Fix of 4 CVEs","details":"- CVE-2026-73197: limit the request body size of the unauthenticated migration endpoint\n- CVE-2026-73198: limit the request body size of the unauthenticated i18n_messages endpoint\n- CVE-2026-76578: harden default ACIs and permissions against unauthenticated and delegated privilege escalation\n- CVE-2026-79678: enforce managed permission checks in LDAP-oriented commands before privileged side effects","modified":"2026-10-26T09:30:39.108407824Z","published":"2026-10-09T16:37:32Z","upstream":["CVE-2026-73197","CVE-2026-73198","CVE-2026-76578","CVE-2026-79678"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791563836.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73197"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73198"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76578"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79678"}],"affected":[{"package":{"name":"ipa-client","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-client-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-client-epn","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client-epn?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-client-samba","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-client-samba?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-python-compat","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-python-compat?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-selinux","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-selinux?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-server","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-server-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-server-dns","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server-dns?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"ipa-server-trust-ad","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ipa-server-trust-ad?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"python3-ipaclient","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipaclient?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"python3-ipalib","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipalib?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"python3-ipaserver","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipaserver?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}},{"package":{"name":"python3-ipatests","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-ipatests?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"}}],"schema_version":"1.9.0"}