Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat IPA may let attackers gain unauthorized access

published 25 days ago

Summary

The Red Hat Identity Management packages (ipa, ipa-client and related components) contain flaws that could let an attacker bypass authentication or execute actions as a privileged user. This could expose sensitive data or allow changes to system settings. Apply the latest Red Hat updates to these packages as soon as possible to protect your environment.

What to do

Update redhat ipa to version 0:4.13.4-1.el9_8.
Update redhat ipa-client to version 0:4.13.4-1.el9_8.
Update redhat ipa-client-common to version 0:4.13.4-1.el9_8.
Update redhat ipa-client-debuginfo to version 0:4.13.4-1.el9_8.
Update redhat ipa-client-encrypted-dns to version 0:4.13.4-1.el9_8.
Update redhat ipa-client-epn to version 0:4.13.4-1.el9_8.
Update redhat ipa-client-samba to version 0:4.13.4-1.el9_8.
Update redhat ipa-common to version 0:4.13.4-1.el9_8.
Update redhat ipa-debuginfo to version 0:4.13.4-1.el9_8.
Update redhat ipa-debugsource to version 0:4.13.4-1.el9_8.
Update redhat ipa-selinux to version 0:4.13.4-1.el9_8.
Update redhat ipa-selinux-luna to version 0:4.13.4-1.el9_8.
Update redhat ipa-selinux-nfast to version 0:4.13.4-1.el9_8.
Update redhat ipa-server to version 0:4.13.4-1.el9_8.
Update redhat ipa-server-common to version 0:4.13.4-1.el9_8.
Update redhat ipa-server-debuginfo to version 0:4.13.4-1.el9_8.
Update redhat ipa-server-dns to version 0:4.13.4-1.el9_8.
Update redhat ipa-server-encrypted-dns to version 0:4.13.4-1.el9_8.
Update redhat ipa-server-trust-ad to version 0:4.13.4-1.el9_8.
Update redhat ipa-server-trust-ad-debuginfo to version 0:4.13.4-1.el9_8.
Update redhat python3-ipaclient to version 0:4.13.4-1.el9_8.
Update redhat python3-ipalib to version 0:4.13.4-1.el9_8.
Update redhat python3-ipaserver to version 0:4.13.4-1.el9_8.
Update redhat python3-ipatests to version 0:4.13.4-1.el9_8.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	ipa	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-client	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-client-common	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-client-debuginfo	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-client-encrypted-dns	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-client-epn	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-client-samba	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-common	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-debuginfo	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-debugsource	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-selinux	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-selinux-luna	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-selinux-nfast	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-server	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-server-common	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-server-debuginfo	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-server-dns	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-server-encrypted-dns	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-server-trust-ad	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	ipa-server-trust-ad-debuginfo	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	python3-ipaclient	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	python3-ipalib	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	python3-ipaserver	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	python3-ipatests	< 0:4.13.4-1.el9_8 Fix: upgrade to 0:4.13.4-1.el9_8

Original advisory text

Red Hat Security Advisory: ipa security, bug fix, and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:70564 Vendor Advisory
https://access.redhat.com/security/updates/classification/#critical Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2472960 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2474697 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487472 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2508181 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2514019 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2515974 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2519522 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2523356 Third Party Advisory
https://issues.redhat.com/browse/RHEL-170987 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70564.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-11861 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-11861 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-11861 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-13097 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-13097 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-13097 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-18147 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-18147 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-18147 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-19550 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-19550 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-19550 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-73197 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-73197 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-73197 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-73198 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-73198 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-73198 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-76578 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-76578 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-76578 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-79678 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-79678 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-79678 Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Timeline

Published24 Sep 2026

Updated24 Sep 2026

First seen24 Sep 2026

Sources

RHSA-2026:70564 · OSV

Track software like this

Free during beta