CLSA-2026-1791563836

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791563836
Upstream
CVE (4)
Published
2026-10-09T16:37:32Z
Modified
2026-10-26T09:30:39Z
Summary
ipa: Fix of 4 CVEs
Details
  • CVE-2026-73197: limit the request body size of the unauthenticated migration endpoint
  • CVE-2026-73198: limit the request body size of the unauthenticated i18n_messages endpoint
  • CVE-2026-76578: harden default ACIs and permissions against unauthenticated and delegated privilege escalation
  • CVE-2026-79678: enforce managed permission checks in LDAP-oriented commands before privileged side effects
References

Affected packages

TuxCare:AlmaLinux:9.2
ipa-client

Package

Name
ipa-client
Purl
pkg:rpm/tuxcare/ipa-client?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-client-common

Package

Name
ipa-client-common
Purl
pkg:rpm/tuxcare/ipa-client-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-client-epn

Package

Name
ipa-client-epn
Purl
pkg:rpm/tuxcare/ipa-client-epn?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-client-samba

Package

Name
ipa-client-samba
Purl
pkg:rpm/tuxcare/ipa-client-samba?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-common

Package

Name
ipa-common
Purl
pkg:rpm/tuxcare/ipa-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-python-compat

Package

Name
ipa-python-compat
Purl
pkg:rpm/tuxcare/ipa-python-compat?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-selinux

Package

Name
ipa-selinux
Purl
pkg:rpm/tuxcare/ipa-selinux?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-server

Package

Name
ipa-server
Purl
pkg:rpm/tuxcare/ipa-server?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-server-common

Package

Name
ipa-server-common
Purl
pkg:rpm/tuxcare/ipa-server-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-server-dns

Package

Name
ipa-server-dns
Purl
pkg:rpm/tuxcare/ipa-server-dns?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
ipa-server-trust-ad

Package

Name
ipa-server-trust-ad
Purl
pkg:rpm/tuxcare/ipa-server-trust-ad?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
python3-ipaclient

Package

Name
python3-ipaclient
Purl
pkg:rpm/tuxcare/python3-ipaclient?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
python3-ipalib

Package

Name
python3-ipalib
Purl
pkg:rpm/tuxcare/python3-ipalib?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
python3-ipaserver

Package

Name
python3-ipaserver
Purl
pkg:rpm/tuxcare/python3-ipaserver?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"
python3-ipatests

Package

Name
python3-ipatests
Purl
pkg:rpm/tuxcare/python3-ipatests?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791563836.json"