# CVE-2026-18147: ipa: A flaw was found in FreeIPA

CVE-2026-18147 is fixed in 40 products on 1 platform, first by ALSA-2026:70564, released September 23, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-18147
- Priority: High
- CVSS: 9.8 (important)
- EPSS: 0.0058
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 9, 2026

## Description

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bind-dyndb-ldap RHEL 8 | 0:11.6-6.module+el8.10.0+23009+91fb337e | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | bind-dyndb-ldap almalinux 8 | 11.6-6.module_el8.10.0+3980+d78e8e90 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | bind-dyndb-ldap ol 8 | 0:11.6-6.module+el8.10.0+90553+1bd85afa | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | bind-dyndb-ldap rocky 8 | 0:11.6-6.module+el8.10.0+1960+1ed527b3 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | custodia RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | custodia almalinux 8 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | custodia ol 8 | 0:0.6.0-3.module+el8.9.0+90094+20819f5a | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | custodia rocky 8 | 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa RHEL 10 | 4.12.2-15.el10_0.7 | [RHSA-2026:82935](https://patchblox.com/security/data/fix/linux/rhsa-2026-82935.md) | Sep 28, 2026 |
| Linux | ipa rocky 10 | 0:4.13.4-1.el10_2 | [RLSA-2026:72279](https://patchblox.com/security/data/fix/linux/rlsa-2026-72279.md) | Sep 29, 2026 |
| Linux | ipa rocky 8 | 0:4.9.13-21.module+el8.10.0+40089+03bf3c1f | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa rocky 9 | 0:4.13.4-1.el9_8 | [RLSA-2026:70564](https://patchblox.com/security/data/fix/linux/rlsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-client RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-client ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-common RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-client-common RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-common almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-common almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client-common almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-client-common ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-common ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client-common ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-encrypted-dns RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-encrypted-dns almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-encrypted-dns almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-client-encrypted-dns ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-encrypted-dns ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-epn RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-client-epn RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-epn almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-epn almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client-epn almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-client-epn ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-epn ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client-epn ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-samba RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-client-samba RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-client-samba almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-samba almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client-samba almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-client-samba ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-client-samba ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-client-samba ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-common RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-common RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-common almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-common almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-common almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-common ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-common ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-common ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-healthcheck RHEL 8 | 0:0.12-6.module+el8.10.0+23403+cc1f9b40 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-healthcheck almalinux 8 | 0.12-6.module_el8.10.0+4036+84b152d9 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-healthcheck ol 8 | 0:0.12-6.module+el8.10.0+91065+f06407c0 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-healthcheck rocky 8 | 0:0.12-6.module+el8.10.0+2053+a0a9dc19 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-healthcheck-core RHEL 8 | 0:0.12-6.module+el8.10.0+23404+f6b3454f | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-healthcheck-core almalinux 8 | 0.12-6.module_el8.10.0+4036+84b152d9 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-healthcheck-core ol 8 | 0:0.12-6.module+el8.10.0+91065+f06407c0 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-python-compat RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-python-compat almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-python-compat ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-selinux RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-selinux RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-selinux almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-selinux almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-selinux almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-selinux ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-selinux ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-selinux ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-selinux-luna RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-selinux-luna almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-selinux-luna almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-selinux-luna ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-selinux-luna ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-selinux-nfast RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-selinux-nfast almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-selinux-nfast almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-selinux-nfast ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-selinux-nfast ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server RHEL 8 | 0:4.9.13-21.module+el8.10.0+25041+701625f4.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-server RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-server ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-common RHEL 8 | 0:4.9.13-21.module+el8.10.0+25041+701625f4.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-server-common RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-common almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-common almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server-common almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-server-common ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-common ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server-common ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-dns RHEL 8 | 0:4.9.13-21.module+el8.10.0+25041+701625f4.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-server-dns RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-dns almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-dns almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server-dns almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-server-dns ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-dns ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server-dns ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-encrypted-dns RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-encrypted-dns almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-encrypted-dns almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-server-encrypted-dns ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-encrypted-dns ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-trust-ad RHEL 8 | 0:4.9.13-21.module+el8.10.0+25041+701625f4.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | ipa-server-trust-ad RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | ipa-server-trust-ad almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-trust-ad almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server-trust-ad almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | ipa-server-trust-ad ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | ipa-server-trust-ad ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | ipa-server-trust-ad ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | opendnssec RHEL 8 | 0:2.1.7-2.module+el8.10.0+22913+7aa1a207 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | opendnssec almalinux 8 | 2.1.7-2.module_el8.10.0+3980+d78e8e90 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | opendnssec ol 8 | 0:2.1.7-2.module+el8.10.0+90553+1bd85afa | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | opendnssec rocky 8 | 0:2.1.7-2.module+el8.10.0+1960+1ed527b3 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python-jwcrypto rocky 8 | 0:0.5.0-2.module+el8.10.0+1818+2dfda7a6 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python-kdcproxy rocky 8 | 0:0.4-5.module+el8.9.0+1371+ffa84eb9 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python-qrcode rocky 8 | 0:5.3-1.module+el8.10.0+1915+3c70f7d9 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python-yubico rocky 8 | 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-custodia RHEL 8 | 0:0.6.0-3.module+el8.9.0+18911+94941f82 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-custodia almalinux 8 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-custodia ol 8 | 0:0.6.0-3.module+el8.9.0+90094+20819f5a | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipaclient RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-ipaclient RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-ipaclient almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipaclient almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipaclient almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | python3-ipaclient ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipaclient ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipaclient ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-ipalib RHEL 8 | 0:4.9.13-21.module+el8.10.0+25042+a3bddcd5.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-ipalib RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-ipalib almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipalib almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipalib almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | python3-ipalib ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipalib ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipalib ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-ipaserver RHEL 8 | 0:4.9.13-21.module+el8.10.0+25041+701625f4.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-ipaserver RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-ipaserver almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipaserver almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipaserver almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | python3-ipaserver ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipaserver ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipaserver ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-ipatests RHEL 8 | 0:4.9.13-21.module+el8.10.0+25041+701625f4.3 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-ipatests RHEL 9 | 0:4.13.4-1.el9_8 | [RHSA-2026:70564](https://patchblox.com/security/data/fix/linux/rhsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-ipatests almalinux 10 | 4.13.4-1.el10_2 | [ALSA-2026:72279](https://patchblox.com/security/data/fix/linux/alsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipatests almalinux 8 | 4.9.13-21.module_el8.10.0+4302+2d2000af.3 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipatests almalinux 9 | 4.13.4-1.el9_8 | [ALSA-2026:70564](https://patchblox.com/security/data/fix/linux/alsa-2026-70564.md) | Sep 23, 2026 |
| Linux | python3-ipatests ol 10 | 0:4.13.4-1.0.1.el10_2 | [ELSA-2026-72279](https://patchblox.com/security/data/fix/linux/elsa-2026-72279.md) | Sep 28, 2026 |
| Linux | python3-ipatests ol 8 | 0:4.9.13-21.0.2.module+el8.10.0+91065+f06407c0.3 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-ipatests ol 9 | 0:4.13.4-1.0.1.el9_8 | [ELSA-2026-70564](https://patchblox.com/security/data/fix/linux/elsa-2026-70564.md) | Sep 24, 2026 |
| Linux | python3-jwcrypto RHEL 8 | 0:0.5.0-2.module+el8.10.0+21692+c9b201bc | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-jwcrypto almalinux 8 | 0.5.0-2.module_el8.10.0+3844+20e075e5 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-jwcrypto ol 8 | 0:0.5.0-2.module+el8.10.0+90573+7d6bd8da | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-kdcproxy RHEL 8 | 0:0.4-5.module+el8.10.0+23610+7d6e87e5.2 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-kdcproxy almalinux 8 | 0.4-5.module_el8.10.0+4069+1d9eaa78.2 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-kdcproxy ol 8 | 0:0.4-5.module+el8.10.0+90703+a2faa53f.2 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-pyusb RHEL 8 | 0:1.0.0-9.1.module+el8.9.0+18920+2223d05e | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-pyusb almalinux 8 | 1.0.0-9.1.module_el8.7.0+3349+cfeff52e | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-pyusb ol 8 | 0:1.0.0-9.1.module+el8.9.0+90094+20819f5a | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-qrcode RHEL 8 | 0:5.3-1.module+el8.10.0+22544+6a7f07c2 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-qrcode almalinux 8 | 5.3-1.module_el8.10.0+3942+63b39a46 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-qrcode ol 8 | 0:5.3-1.module+el8.10.0+91065+f06407c0 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-qrcode-core RHEL 8 | 0:5.3-1.module+el8.10.0+22544+6a7f07c2 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-qrcode-core almalinux 8 | 5.3-1.module_el8.10.0+3942+63b39a46 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-qrcode-core ol 8 | 0:5.3-1.module+el8.10.0+91065+f06407c0 | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-yubico RHEL 8 | 0:1.3.2-9.1.module+el8.9.0+18920+2223d05e | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | python3-yubico almalinux 8 | 1.3.2-9.1.module_el8.7.0+3349+cfeff52e | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | python3-yubico ol 8 | 0:1.3.2-9.1.module+el8.9.0+90094+20819f5a | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | pyusb rocky 8 | 0:1.0.0-9.1.module+el8.9.0+1372+09f67869 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | slapi-nis RHEL 8 | 0:0.60.0-4.module+el8.10.0+20723+03062ebd | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | slapi-nis almalinux 8 | 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | slapi-nis ol 8 | 0:0.60.0-4.module+el8.10.0+90297+bfe93ccc | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | slapi-nis rocky 8 | 0:0.60.0-4.module+el8.9.0+1573+39ab85f4 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | softhsm RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | softhsm almalinux 8 | 2.6.0-5.module_el8.6.0+2881+2f24dc92 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | softhsm ol 8 | 0:2.6.0-5.module+el8.9.0+90094+20819f5a | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |
| Linux | softhsm rocky 8 | 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9 | [RLSA-2026:83460](https://patchblox.com/security/data/fix/linux/rlsa-2026-83460.md) | Nov 7, 2026 |
| Linux | softhsm-devel RHEL 8 | 0:2.6.0-5.module+el8.9.0+18911+94941f82 | [RHSA-2026:83460](https://patchblox.com/security/data/fix/linux/rhsa-2026-83460.md) | Oct 16, 2026 |
| Linux | softhsm-devel almalinux 8 | 2.6.0-5.module_el8.6.0+2881+2f24dc92 | [ALSA-2026:83460](https://patchblox.com/security/data/fix/linux/alsa-2026-83460.md) | Nov 7, 2026 |
| Linux | softhsm-devel ol 8 | 0:2.6.0-5.module+el8.9.0+90094+20819f5a | [ELSA-2026-83460](https://patchblox.com/security/data/fix/linux/elsa-2026-83460.md) | Nov 7, 2026 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.