p PatchFirst

ALSA-2026:83460

ALSA-2026:83460 · Critical: idm:DL1 security, bug fix, and enhancement update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198) * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197) * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861) * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147) * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550) * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097) * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578) * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678) Bug Fix(es) and Enhancement(s): * Fix ipatests for kdcproxy after CVE-2025-59088 fix [almalinux-8.10.z] (JIRA:AlmaLinux-129966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind-dyndb-ldap AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 11.6-6.module_el8.10.0+3980+d78e8e90

    Update to 11.6-6.module_el8.10.0+3980+d78e8e90

  • custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • ipa-client AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-client-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-client-epn AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-client-samba AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-healthcheck AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-6.module_el8.10.0+4036+84b152d9

    Update to 0.12-6.module_el8.10.0+4036+84b152d9

  • ipa-healthcheck-core AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.12-6.module_el8.10.0+4036+84b152d9

    Update to 0.12-6.module_el8.10.0+4036+84b152d9

  • ipa-python-compat AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-selinux AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-server AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-server-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-server-dns AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • ipa-server-trust-ad AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • opendnssec AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.1.7-2.module_el8.10.0+3980+d78e8e90

    Update to 2.1.7-2.module_el8.10.0+3980+d78e8e90

  • python3-custodia AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.6.0-3.module_el8.6.0+2881+2f24dc92

    Update to 0.6.0-3.module_el8.6.0+2881+2f24dc92

  • python3-ipaclient AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • python3-ipalib AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • python3-ipaserver AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • python3-ipatests AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3

    Update to 4.9.13-21.module_el8.10.0+4302+2d2000af.3

  • python3-jwcrypto AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.5.0-2.module_el8.10.0+3844+20e075e5

    Update to 0.5.0-2.module_el8.10.0+3844+20e075e5

  • python3-kdcproxy AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.4-5.module_el8.10.0+4069+1d9eaa78.2

    Update to 0.4-5.module_el8.10.0+4069+1d9eaa78.2

  • python3-pyusb AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.0.0-9.1.module_el8.7.0+3349+cfeff52e

    Update to 1.0.0-9.1.module_el8.7.0+3349+cfeff52e

  • python3-qrcode AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 5.3-1.module_el8.10.0+3942+63b39a46

    Update to 5.3-1.module_el8.10.0+3942+63b39a46

  • python3-qrcode-core AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 5.3-1.module_el8.10.0+3942+63b39a46

    Update to 5.3-1.module_el8.10.0+3942+63b39a46

  • python3-yubico AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.3.2-9.1.module_el8.7.0+3349+cfeff52e

    Update to 1.3.2-9.1.module_el8.7.0+3349+cfeff52e

  • slapi-nis AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1

    Update to 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1

  • softhsm AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.6.0-5.module_el8.6.0+2881+2f24dc92

    Update to 2.6.0-5.module_el8.6.0+2881+2f24dc92

  • softhsm AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.6.0-5.module_el8.6.0+3031+2f24dc92

    Update to 2.6.0-5.module_el8.6.0+3031+2f24dc92

  • softhsm-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.6.0-5.module_el8.6.0+2881+2f24dc92

    Update to 2.6.0-5.module_el8.6.0+2881+2f24dc92

  • softhsm-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 2.6.0-5.module_el8.6.0+3031+2f24dc92

    Update to 2.6.0-5.module_el8.6.0+3031+2f24dc92

Original sources

Check your server →