Fedora alert FEDORA-2026-fcd4630c0d (freeipa)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 44 Update: freeipa-4.13.2-1.fc44 | |
| Date: | Thu, 06 Aug 2026 17:17:48 +0000 | |
| Message-ID: | <20260806171748.41F8E775F0@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-fcd4630c0d 2026-08-06 17:15:39.889663+00:00 -------------------------------------------------------------------------------- Name : freeipa Product : Fedora 44 Version : 4.13.2 Release : 1.fc44 URL : http://www.freeipa.org/ Summary : The Identity, Policy and Audit system Description : IPA is an integrated solution to provide centrally managed Identity (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access control, SELinux user roles, services). The solution provides features for further integration with Linux based clients (SUDO, automount) and integration with Active Directory based infrastructures (Trusts). -------------------------------------------------------------------------------- Update Information: Update to Samba 4.24.5 (and rebuild of FreeIPA) Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and CVE-2026-58224 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 3 2026 Alexander Bokovoy <abokovoy@redhat.com> - 4.13.2-1 - FreeIPA 4.13.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2509257 - CVE-2026-6949 samba: TSIG packet with crafted name compression can crash DNS server [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2509257 [ 2 ] Bug #2509266 - CVE-2026-58218 samba: DNS signing DoS via TKEY name cache exhaustion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2509266 [ 3 ] Bug #2509280 - CVE-2026-58221 samba: authenticated LDAP access to internal LDB special DNs permits domain takeover [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2509280 [ 4 ] Bug #2509502 - CVE-2026-58222 samba: Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2509502 [ 5 ] Bug #2510787 - samba-4.24.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2510787 [ 6 ] Bug #2510884 - CVE-2026-58216 samba: kpasswd service: kpasswd packet that contains malformed ASN.1 might cause the server to access 6 bytes of unallocated memory leading server to crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2510884 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fcd4630c0d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new