CLSA-2026-1778881463

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLSA-2026-1778881463
Upstream
Published
2026-05-15T23:08:57Z
Modified
2026-05-27T11:36:16Z
Summary
ipa: Fix of 3 CVEs
Details
  • CVE-2023-5455: fix CSRF vulnerability by adding Referer header check to all session endpoints
  • CVE-2024-1481: validate Kerberos principal name before kinit and pass it with -- separator to prevent option injection
  • CVE-2024-11029: scrub administrative passwords from process command line and pass OIDC client secret via stdin
References

Affected packages

TuxCare:AlmaLinux:9.2
ipa-client

Package

Name
ipa-client
Purl
pkg:rpm/tuxcare/ipa-client?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-client-common

Package

Name
ipa-client-common
Purl
pkg:rpm/tuxcare/ipa-client-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-client-epn

Package

Name
ipa-client-epn
Purl
pkg:rpm/tuxcare/ipa-client-epn?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-client-samba

Package

Name
ipa-client-samba
Purl
pkg:rpm/tuxcare/ipa-client-samba?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-common

Package

Name
ipa-common
Purl
pkg:rpm/tuxcare/ipa-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-python-compat

Package

Name
ipa-python-compat
Purl
pkg:rpm/tuxcare/ipa-python-compat?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-selinux

Package

Name
ipa-selinux
Purl
pkg:rpm/tuxcare/ipa-selinux?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-server

Package

Name
ipa-server
Purl
pkg:rpm/tuxcare/ipa-server?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-server-common

Package

Name
ipa-server-common
Purl
pkg:rpm/tuxcare/ipa-server-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-server-dns

Package

Name
ipa-server-dns
Purl
pkg:rpm/tuxcare/ipa-server-dns?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
ipa-server-trust-ad

Package

Name
ipa-server-trust-ad
Purl
pkg:rpm/tuxcare/ipa-server-trust-ad?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
python3-ipaclient

Package

Name
python3-ipaclient
Purl
pkg:rpm/tuxcare/python3-ipaclient?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
python3-ipalib

Package

Name
python3-ipalib
Purl
pkg:rpm/tuxcare/python3-ipalib?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
python3-ipaserver

Package

Name
python3-ipaserver
Purl
pkg:rpm/tuxcare/python3-ipaserver?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"
python3-ipatests

Package

Name
python3-ipatests
Purl
pkg:rpm/tuxcare/python3-ipatests?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.10.1-9.el9_2.alma.1.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778881463.json"