CLSA-2026-1791364402

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1791364402

Upstream

CVE (8)

CVE-2026-11861
CVE-2026-13097
CVE-2026-18147
CVE-2026-19550
CVE-2026-73197
CVE-2026-73198
CVE-2026-76578
CVE-2026-79678

Published

2026-10-07T11:56:00Z

Modified

2026-10-26T09:43:36Z

Summary

ipa: Fix of 8 CVEs

Details

CVE-2026-76578: constrain the self-managed OTP token ACI, deny anonymous modifications and harden self-service and delegated-write ACIs
CVE-2026-79678: enforce managed permissions before LDAP-oriented commands run their callbacks, and require privileges for RA-agent backed operations
CVE-2026-13097: enforce Kerberos principal name uniqueness with a principal-aware matching rule (new ipa-krbprinc-mr 389-ds plugin)
CVE-2026-11861: validate the PAC of cross-realm trust tickets in the KDB driver, including ID override checks
CVE-2026-73198: limit the request body size of the unauthenticated /ipa/i18n_messages endpoint
CVE-2026-73197: reject oversized Content-Length in the unauthenticated password migration endpoint
CVE-2026-19550: require write access to the trust entry for trust-fetch-domains
CVE-2026-18147: remove the redirect from the Web UI password reset page

References

Affected packages

TuxCare:AlmaLinux:9.6

ipa-client

Package

Name: ipa-client
Purl: pkg:rpm/tuxcare/ipa-client?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-client-common

Package

Name: ipa-client-common
Purl: pkg:rpm/tuxcare/ipa-client-common?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-client-encrypted-dns

Package

Name: ipa-client-encrypted-dns
Purl: pkg:rpm/tuxcare/ipa-client-encrypted-dns?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-client-epn

Package

Name: ipa-client-epn
Purl: pkg:rpm/tuxcare/ipa-client-epn?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-client-samba

Package

Name: ipa-client-samba
Purl: pkg:rpm/tuxcare/ipa-client-samba?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-common

Package

Name: ipa-common
Purl: pkg:rpm/tuxcare/ipa-common?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-python-compat

Package

Name: ipa-python-compat
Purl: pkg:rpm/tuxcare/ipa-python-compat?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-selinux

Package

Name: ipa-selinux
Purl: pkg:rpm/tuxcare/ipa-selinux?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-selinux-luna

Package

Name: ipa-selinux-luna
Purl: pkg:rpm/tuxcare/ipa-selinux-luna?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-selinux-nfast

Package

Name: ipa-selinux-nfast
Purl: pkg:rpm/tuxcare/ipa-selinux-nfast?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-server

Package

Name: ipa-server
Purl: pkg:rpm/tuxcare/ipa-server?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-server-common

Package

Name: ipa-server-common
Purl: pkg:rpm/tuxcare/ipa-server-common?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-server-dns

Package

Name: ipa-server-dns
Purl: pkg:rpm/tuxcare/ipa-server-dns?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-server-encrypted-dns

Package

Name: ipa-server-encrypted-dns
Purl: pkg:rpm/tuxcare/ipa-server-encrypted-dns?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

ipa-server-trust-ad

Package

Name: ipa-server-trust-ad
Purl: pkg:rpm/tuxcare/ipa-server-trust-ad?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

python3-ipaclient

Package

Name: python3-ipaclient
Purl: pkg:rpm/tuxcare/python3-ipaclient?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

python3-ipalib

Package

Name: python3-ipalib
Purl: pkg:rpm/tuxcare/python3-ipalib?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

python3-ipaserver

Package

Name: python3-ipaserver
Purl: pkg:rpm/tuxcare/python3-ipaserver?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"

python3-ipatests

Package

Name: python3-ipatests
Purl: pkg:rpm/tuxcare/python3-ipatests?distro=almalinux-9.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.12.2-14.0.1.el9_6.5.tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791364402.json"