CLSA-2026-1791544796

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791544796
Upstream
CVE (4)
Published
2026-10-09T14:02:25Z
Modified
2026-10-26T09:30:07Z
Summary
ipa: Fix of 4 CVEs
Details
  • CVE-2026-11861: validate the PAC of cross-realm trust tickets in the KDB driver, including ID override checks
  • CVE-2026-13097: enforce Kerberos principal name uniqueness with a principal-aware matching rule (new ipa-krbprinc-mr 389-ds plugin)
  • CVE-2026-18147: remove the arbitrary URL redirect from the Web UI password reset page
  • CVE-2026-19550: require write access to the trust entry before refreshing trust domains
  • do not fail ipa-server or ipa-server-trust-ad removal on hosts without a running systemd, such as container images: the dbus and oddjobd reload calls in the install and removal scriptlets now tolerate failure, like the stop, disable and condrestart calls beside them
References

Affected packages

TuxCare:AlmaLinux:9.2
ipa-client

Package

Name
ipa-client
Purl
pkg:rpm/tuxcare/ipa-client?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-client-common

Package

Name
ipa-client-common
Purl
pkg:rpm/tuxcare/ipa-client-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-client-epn

Package

Name
ipa-client-epn
Purl
pkg:rpm/tuxcare/ipa-client-epn?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-client-samba

Package

Name
ipa-client-samba
Purl
pkg:rpm/tuxcare/ipa-client-samba?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-common

Package

Name
ipa-common
Purl
pkg:rpm/tuxcare/ipa-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-python-compat

Package

Name
ipa-python-compat
Purl
pkg:rpm/tuxcare/ipa-python-compat?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-selinux

Package

Name
ipa-selinux
Purl
pkg:rpm/tuxcare/ipa-selinux?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-server

Package

Name
ipa-server
Purl
pkg:rpm/tuxcare/ipa-server?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-server-common

Package

Name
ipa-server-common
Purl
pkg:rpm/tuxcare/ipa-server-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-server-dns

Package

Name
ipa-server-dns
Purl
pkg:rpm/tuxcare/ipa-server-dns?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
ipa-server-trust-ad

Package

Name
ipa-server-trust-ad
Purl
pkg:rpm/tuxcare/ipa-server-trust-ad?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
python3-ipaclient

Package

Name
python3-ipaclient
Purl
pkg:rpm/tuxcare/python3-ipaclient?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
python3-ipalib

Package

Name
python3-ipalib
Purl
pkg:rpm/tuxcare/python3-ipalib?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
python3-ipaserver

Package

Name
python3-ipaserver
Purl
pkg:rpm/tuxcare/python3-ipaserver?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"
python3-ipatests

Package

Name
python3-ipatests
Purl
pkg:rpm/tuxcare/python3-ipatests?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791544796.json"