Linux · Security advisory · September 28, 2026
ELSA-2026-72279: Security update for 18 packages
ELSA-2026-72279, released September 28, 2026, fixes 8 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
8
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0131
70th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 4
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ipa-client | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-client-common | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-client-encrypted-dns | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-client-epn | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-client-samba | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-common | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-selinux | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-selinux-luna | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-selinux-nfast | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-server | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-server-common | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-server-dns | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-server-encrypted-dns | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| ipa-server-trust-ad | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| python3-ipaclient | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| python3-ipalib | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| python3-ipaserver | ol 10 | 0:4.13.4-1.0.1.el10_2 |
| python3-ipatests | ol 10 | 0:4.13.4-1.0.1.el10_2 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-76578 | ipa-client: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution... | 9.8 | 0.0131 | None reported | |
| Urgent | CVE-2026-79678 | ipa-client: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution... | 9.8 | 0.0090 | None reported | |
| Urgent | CVE-2026-73197 | ipa-client: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution... | 9.8 | 0.0059 | None reported | |
| Urgent | CVE-2026-73198 | ipa-client: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution... | 9.8 | 0.0054 | None reported | |
| High | CVE-2026-13097 | ipa: A privilege escalation flaw was found in FreeIPA | 9.8 | 0.0078 | None reported | |
| High | CVE-2026-18147 | ipa: A flaw was found in FreeIPA | 9.8 | 0.0058 | None reported | |
| High | CVE-2026-19550 | ipa: A flaw was found in FreeIPA | 9.8 | 0.0048 | None reported | |
| High | CVE-2026-11861 | ipa: A flaw was found in FreeIPA | 9.8 | 0.0036 | None reported |
Showing 1 to 8 of 8
1