{"id":"CVE-2026-11861","aliases":["ALSA-2026:70564","ALSA-2026:72279","ALSA-2026:83460","CLSA-2026-1791364402","CLSA-2026-1791544796","DEBIAN-CVE-2026-11861","EUVD-2026-63245","GHSA-g67c-jg9c-rqh2","RHSA-2026:70564","RHSA-2026:72279","RHSA-2026:82935","RHSA-2026:83083","RHSA-2026:83084","RHSA-2026:83085","RHSA-2026:83460","RHSA-2026:83461","RLSA-2026:70564","RLSA-2026:72279","RLSA-2026:83460","UBUNTU-CVE-2026-11861"],"status":"published","title":"Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","severity":{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00363,"percentile":0.30568,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-266"],"published":"2026-08-20T10:39:08Z","modified":"2026-11-07T11:00:11Z","affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-client-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-selinux-luna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-selinux-nfast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-server-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-client-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-selinux-luna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-selinux-nfast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-server-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.6-6.module_el8.10.0+3980+d78e8e90"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-6.module_el8.10.0+4036+84b152d9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-6.module_el8.10.0+4036+84b152d9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-2.module_el8.10.0+3980+d78e8e90"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.13-21.module_el8.10.0+4302+2d2000af.3"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-2.module_el8.10.0+3844+20e075e5"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-5.module_el8.10.0+4069+1d9eaa78.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.1.module_el8.7.0+3349+cfeff52e"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-1.module_el8.10.0+3942+63b39a46"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3-1.module_el8.10.0+3942+63b39a46"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.1.module_el8.7.0+3349+cfeff52e"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+2881+2f24dc92"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+3031+2f24dc92"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+2881+2f24dc92"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+3031+2f24dc92"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-client-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-selinux-luna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-selinux-nfast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-server-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-14.0.1.el9_6.5.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-9.el9_2.alma.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.1+dfsg1-1+exp1","4.10.1-1+exp1","4.10.2-1","4.10.2-2","4.10.2-2+exp1","4.11.1-1","4.11.1-1+exp1","4.11.1-2","4.11.1-2+exp1","4.11.1-2.1","4.12.2-1","4.12.2-2","4.12.2-3","4.12.4-1","4.12.4-2","4.13.1-1","4.9.11-1","4.9.11-1+exp1","4.9.11-2"]},{"source":"osv","ecosystem":"Debian:13","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.4-1","4.12.4-2","4.13.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.4-1","4.12.4-2","4.13.1-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-client-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-selinux-luna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-selinux-nfast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-server-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-client-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-selinux-luna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-selinux-nfast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-server-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-client-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-selinux-luna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-selinux-nfast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-server-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-15.el10_0.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-client-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-selinux-luna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-selinux-nfast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-server-encrypted-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.2-14.el9_6.8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-15.el9_4.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-12.el9_2.7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-6.module+el8.10.0+23009+91fb337e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-6.module+el8.10.0+23009+91fb337e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-6.module+el8.10.0+23009+91fb337e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.9.0+18911+94941f82"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-6.module+el8.10.0+23404+f6b3454f"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-6.module+el8.10.0+23404+f6b3454f"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-2.module+el8.10.0+22913+7aa1a207"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-2.module+el8.10.0+22913+7aa1a207"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-2.module+el8.10.0+22913+7aa1a207"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-2.module+el8.10.0+21692+c9b201bc"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.10.0+23610+7d6e87e5.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3-1.module+el8.10.0+22544+6a7f07c2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+18920+2223d05e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.9.0+18911+94941f82"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+25041+701625f4.3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-2.module+el8.10.0+21692+c9b201bc"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.10.0+23610+7d6e87e5.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+18920+2223d05e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3-1.module+el8.10.0+22544+6a7f07c2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3-1.module+el8.10.0+22544+6a7f07c2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+18920+2223d05e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+18920+2223d05e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.10.0+20723+03062ebd"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.10.0+20723+03062ebd"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.10.0+20723+03062ebd"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+21675+157fa23b.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+21675+157fa23b.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+21675+157fa23b.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-1.module+el8.8.0+17583+8c783c60"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-1.module+el8.8.0+17583+8c783c60"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.7.0+15888+685a878f"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.8.0+24989+289c67e6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.7.0+15888+685a878f"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.8.0+24989+289c67e6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+21675+157fa23b.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+21675+157fa23b.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+21675+157fa23b.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-1.module+el8.8.0+17583+8c783c60"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-1.module+el8.8.0+17583+8c783c60"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.7.0+15888+685a878f"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.8.0+24989+289c67e6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25045+e21657cc.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-11.module+el8.8.0+25043+cab6964c.6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.7.0+15888+685a878f"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.8.0+24989+289c67e6.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el9_8"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:10","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.4-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-6.module+el8.10.0+1960+1ed527b3"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+40089+03bf3c1f"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.13-21.module+el8.10.0+40090+e6f37a74"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-6.module+el8.10.0+2053+a0a9dc19"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-6.module+el8.10.0+2054+aa003774"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-2.module+el8.10.0+1960+1ed527b3"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-2.module+el8.10.0+1818+2dfda7a6"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-2.module+el8.10.0+1819+0aeba2f1"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.10.0+1915+3c70f7d9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.10.0+2094+d7886766.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3-1.module+el8.10.0+1915+3c70f7d9"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3-1.module+el8.10.0+1916+6bb8cf6b"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+1372+09f67869"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+1372+09f67869"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.9.0+1573+39ab85f4"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.1-0ubuntu1","3.3.4-0ubuntu1","3.3.4-0ubuntu2","3.3.4-0ubuntu3","3.3.4-0ubuntu3.1","3.3.4-0ubuntu3.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.4-1","4.3.1-0ubuntu1","4.3.1-0ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.4-3ubuntu1","4.4.4-4","4.7.0~pre1+git20180411-2ubuntu1","4.7.0~pre1+git20180411-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-2ubuntu1","4.8.3-1","4.8.6-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.6-1ubuntu6","4.8.6-1ubuntu8","4.8.6-1ubuntu9","4.9.8-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.2-1","4.10.2-2","4.10.2-2ubuntu3","4.11.1-1","4.11.1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.1-1","4.13.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.4-1","4.12.4-2","4.13.1-1"]}],"products":[{"vendor":"freeipa","product":"freeipa"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:70564","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72279","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82935","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:83083","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:83084","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:83085","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:83460","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:83461","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89836","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93071","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93452","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-11861","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487472","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11861","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g67c-jg9c-rqh2"},{"url":"https://access.redhat.com/security/cve/CVE-2026-13097","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18147","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19550","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73197","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73198","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-76578","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-79678","tags":["report"]},{"url":"https://bugzilla.redhat.com/2472960","tags":["report"]},{"url":"https://bugzilla.redhat.com/2474697","tags":["report"]},{"url":"https://bugzilla.redhat.com/2487472","tags":["report"]},{"url":"https://bugzilla.redhat.com/2508181","tags":["report"]},{"url":"https://bugzilla.redhat.com/2514019","tags":["report"]},{"url":"https://bugzilla.redhat.com/2515974","tags":["report"]},{"url":"https://bugzilla.redhat.com/2519522","tags":["report"]},{"url":"https://bugzilla.redhat.com/2523356","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-70564.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-72279.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-83460.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1791364402.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79678","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791544796.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11861.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-11861","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2472960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2474697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523356","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-170987","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70564.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-11861","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-13097","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18147","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19550","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73197","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73198","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76578","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-79678","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-173375","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72279.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82935.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83083.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83084.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83085.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83460.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83461.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:70564","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:72279","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:83460","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-11861","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-11861","title":"Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","status":"published","published":"2026-08-20T10:39:08.025Z","modified":"2026-11-05T16:22:53.236Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-266"],"updated_at":"2026-11-05T17:53:58.925122Z"}],"euvd":[{"id":"EUVD-2026-63245","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","status":"published","published":"2026-08-20T10:39:08Z","modified":"2026-11-05T16:22:53Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-05T18:00:58.377138Z"}],"ghsa":[{"id":"GHSA-g67c-jg9c-rqh2","title":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active...","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","status":"published","published":"2026-08-20T12:31:21Z","modified":"2026-11-02T06:32:15Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-266"],"updated_at":"2026-11-02T15:14:55.927217Z"}],"nvd":[{"id":"CVE-2026-11861","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","status":"published","published":"2026-08-20T11:16:19.27Z","modified":"2026-11-05T17:17:58.833Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-266"],"updated_at":"2026-11-05T19:55:59.050404Z"}],"osv":[{"id":"CVE-2026-11861","title":"Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","status":"published","published":"2026-08-20T10:39:08.025Z","modified":"2026-11-07T02:30:26.370813884Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-266"],"updated_at":"2026-11-07T03:08:01.41647Z"},{"id":"DEBIAN-CVE-2026-11861","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","status":"published","published":"2026-08-20T11:16:19.27Z","modified":"2026-11-07T11:00:11.830132748Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-07T11:15:14.449016Z"},{"id":"RHSA-2026:70564","title":"Red Hat Security Advisory: ipa security, bug fix, and enhancement update","status":"published","published":"2026-09-24T10:14:58Z","modified":"2026-10-20T10:14:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:72279","title":"Red Hat Security Advisory: ipa security, bug fix, and enhancement update","status":"published","published":"2026-09-28T10:15:52Z","modified":"2026-10-20T10:15:00Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:82935","title":"Red Hat Security Advisory: ipa security update","status":"published","published":"2026-10-15T10:28:50Z","modified":"2026-10-20T10:17:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:83083","title":"Red Hat Security Advisory: ipa security update","status":"published","published":"2026-10-15T10:28:53Z","modified":"2026-10-20T10:17:08Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:83084","title":"Red Hat Security Advisory: ipa security update","status":"published","published":"2026-10-15T10:28:53Z","modified":"2026-10-20T10:17:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:83085","title":"Red Hat Security Advisory: ipa security, bug fix, and enhancement update","status":"published","published":"2026-10-15T10:28:54Z","modified":"2026-10-20T10:17:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:83460","title":"Red Hat Security Advisory: idm:DL1 security, bug fix, and enhancement update","status":"published","published":"2026-10-15T10:29:02Z","modified":"2026-10-20T10:17:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:83461","title":"Red Hat Security Advisory: idm:DL1 security, bug fix, and enhancement update","status":"published","published":"2026-10-15T10:29:02Z","modified":"2026-10-20T10:17:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:70564","title":"Critical: ipa security, bug fix, and enhancement update","description":"Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.\n\nSecurity Fix(es):\n\n* ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198)\n\n* ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197)\n\n* FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861)\n\n* freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147)\n\n* freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550)\n\n* ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097)\n\n* ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578)\n\n* freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678)\n\nBug Fix(es) and Enhancement(s):\n\n* [Cursor Automated] Include latest fixes in python3-ipatests package [Rocky Linux9.8] (JIRA:Rocky Linux-170987)\n\n* WebUI Hardening [rhel-9.8.z] (JIRA:Rocky Linux-238511)\n\n* ipa-otptoken-import hardening [rhel-9.8.z] (JIRA:Rocky Linux-238519)\n\n* host-mod: handle the password attribute when set with --setattr userpassword= [rhel-9.8.z] (JIRA:Rocky Linux-238523)\n\n* ipa env: support only simple * wildcard [rhel-9.8.z] (JIRA:Rocky Linux-238527)\n\n* ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] (JIRA:Rocky Linux-238674)\n\n* ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] (JIRA:Rocky Linux-238677)\n\n* ipa-migrate tool is renaming host records \u0026 host info in automount information [rhel-9.8.z] (JIRA:Rocky Linux-240767)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-24T18:05:00.461776Z","modified":"2026-09-24T18:24:42.132385976Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:72279","title":"Critical: ipa security, bug fix, and enhancement update","description":"Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.\n\nSecurity Fix(es):\n\n* ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198)\n\n* ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197)\n\n* FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861)\n\n* freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147)\n\n* freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550)\n\n* ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097)\n\n* ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578)\n\n* freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678)\n\nBug Fix(es) and Enhancement(s):\n\n* [Cursor Automated] Include latest fixes in python3-ipatests package [Rocky Linux10.2] (JIRA:Rocky Linux-173375)\n\n* WebUI Hardening [rhel-10.2.z] (JIRA:Rocky Linux-238510)\n\n* ipa-otptoken-import hardening [rhel-10.2.z] (JIRA:Rocky Linux-238518)\n\n* host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] (JIRA:Rocky Linux-238522)\n\n*  ipa env: support only simple * wildcard [rhel-10.2.z] (JIRA:Rocky Linux-238526)\n\n* ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] (JIRA:Rocky Linux-238673)\n\n* ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] (JIRA:Rocky Linux-238676)\n\n* ipa-migrate tool is renaming host records \u0026 host info in automount information [rhel-10.2.z] (JIRA:Rocky Linux-240768)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-29T12:10:25.697024Z","modified":"2026-09-29T12:30:02.649660239Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:83460","title":"Critical: idm:DL1 security, bug fix, and enhancement update","description":"Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. \n\nSecurity Fix(es):\n\n* ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198)\n\n* ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197)\n\n* FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861)\n\n* freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147)\n\n* freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550)\n\n* ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097)\n\n* ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578)\n\n* freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678)\n\nBug Fix(es) and Enhancement(s):\n\n* Fix ipatests for kdcproxy after CVE-2025-59088 fix [rhel-8.10.z] (JIRA:Rocky Linux-129966)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-15T06:29:02.048659Z","modified":"2026-10-15T07:00:02.921467077Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-11861","description":"A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.","status":"published","published":"2026-08-20T11:16:00Z","modified":"2026-10-17T12:58:04.856480055Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:56:00.081948Z"},{"id":"ALSA-2026:70564","title":"Critical: ipa security, bug fix, and enhancement update","description":"AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  \n\nSecurity Fix(es):  \n\n  * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198)\n  * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197)\n  * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861)\n  * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147)\n  * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550)\n  * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097)\n  * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578)\n  * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [Cursor Automated] Include latest fixes in python3-ipatests package [AlmaLinux9.8] (JIRA:AlmaLinux-170987)\n  * WebUI Hardening [almalinux-9.8.z] (JIRA:AlmaLinux-238511)\n  * ipa-otptoken-import hardening [almalinux-9.8.z] (JIRA:AlmaLinux-238519)\n  * host-mod: handle the password attribute when set with --setattr userpassword= [almalinux-9.8.z] (JIRA:AlmaLinux-238523)\n  * ipa env: support only simple * wildcard [almalinux-9.8.z] (JIRA:AlmaLinux-238527)\n  * ipa-epn: drop_privileges method is mixing uid and gid [almalinux-9.8.z] (JIRA:AlmaLinux-238674)\n  * ipa-migrate: require Replication Administrator privilege [almalinux-9.8.z] (JIRA:AlmaLinux-238677)\n  * ipa-migrate tool is renaming host records \u0026 host info in automount information [almalinux-9.8.z] (JIRA:AlmaLinux-240767)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-23T00:00:00Z","modified":"2026-10-29T11:30:22.694551774Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:72279","title":"Critical: ipa security, bug fix, and enhancement update","description":"AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  \n\nSecurity Fix(es):  \n\n  * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198)\n  * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197)\n  * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861)\n  * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147)\n  * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550)\n  * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097)\n  * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578)\n  * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [Cursor Automated] Include latest fixes in python3-ipatests package [AlmaLinux10.2] (JIRA:AlmaLinux-173375)\n  * WebUI Hardening [almalinux-10.2.z] (JIRA:AlmaLinux-238510)\n  * ipa-otptoken-import hardening [almalinux-10.2.z] (JIRA:AlmaLinux-238518)\n  * host-mod: handle the password attribute when set with --setattr userpassword= [almalinux-10.2.z] (JIRA:AlmaLinux-238522)\n  * ipa env: support only simple * wildcard [almalinux-10.2.z] (JIRA:AlmaLinux-238526)\n  * ipa-epn: drop_privileges method is mixing uid and gid [almalinux-10.2.z] (JIRA:AlmaLinux-238673)\n  * ipa-migrate: require Replication Administrator privilege [almalinux-10.2.z] (JIRA:AlmaLinux-238676)\n  * ipa-migrate tool is renaming host records \u0026 host info in automount information [almalinux-10.2.z] (JIRA:AlmaLinux-240768)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-28T00:00:00Z","modified":"2026-10-29T11:30:51.383067267Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:83460","title":"Critical: idm:DL1 security, bug fix, and enhancement update","description":"AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.   \n\nSecurity Fix(es):  \n\n  * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198)\n  * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197)\n  * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861)\n  * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147)\n  * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550)\n  * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097)\n  * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578)\n  * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Fix ipatests for kdcproxy after CVE-2025-59088 fix [almalinux-8.10.z] (JIRA:AlmaLinux-129966)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-15T00:00:00Z","modified":"2026-10-29T11:02:24.820459948Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"CLSA-2026-1791364402","title":"ipa: Fix of 8 CVEs","description":"- CVE-2026-76578: constrain the self-managed OTP token ACI, deny anonymous\n  modifications and harden self-service and delegated-write ACIs\n- CVE-2026-79678: enforce managed permissions before LDAP-oriented commands\n  run their callbacks, and require privileges for RA-agent backed operations\n- CVE-2026-13097: enforce Kerberos principal name uniqueness with a\n  principal-aware matching rule (new ipa-krbprinc-mr 389-ds plugin)\n- CVE-2026-11861: validate the PAC of cross-realm trust tickets in the KDB\n  driver, including ID override checks\n- CVE-2026-73198: limit the request body size of the unauthenticated\n  /ipa/i18n_messages endpoint\n- CVE-2026-73197: reject oversized Content-Length in the unauthenticated\n  password migration endpoint\n- CVE-2026-19550: require write access to the trust entry for\n  trust-fetch-domains\n- CVE-2026-18147: remove the redirect from the Web UI password reset page","status":"published","published":"2026-10-07T11:56:00Z","modified":"2026-10-26T09:43:36.193228848Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791544796","title":"ipa: Fix of 4 CVEs","description":"- CVE-2026-11861: validate the PAC of cross-realm trust tickets in the KDB driver, including ID override checks\n- CVE-2026-13097: enforce Kerberos principal name uniqueness with a principal-aware matching rule (new ipa-krbprinc-mr 389-ds plugin)\n- CVE-2026-18147: remove the arbitrary URL redirect from the Web UI password reset page\n- CVE-2026-19550: require write access to the trust entry before refreshing trust domains\n- do not fail ipa-server or ipa-server-trust-ad removal on hosts without a running systemd,\n  such as container images: the dbus and oddjobd reload calls in the install and removal\n  scriptlets now tolerate failure, like the stop, disable and condrestart calls beside them","status":"published","published":"2026-10-09T14:02:25Z","modified":"2026-10-26T09:30:07.877004434Z","updated_at":"2026-11-02T15:43:50.599064Z"}]}}