ALT-PU-2026-18151

Критический

ALT-PU-2026-18151: package freeipa update to version 4.12.5-alt6.gitb360c852d3

Источник

errata.altlinux.org

Дата публикации

16.10.2026

Дата обновления

16.10.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades freeipa to version 4.12.5-alt6.gitb360c852d3.

Устраненные уязвимости10

CVE-2026-11861

Высокий 8.1

Дата публикации: 20.08.2026

CWE-266

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.

CVSS 3.1

Высокий 8.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: None

Ссылки

CVE-2026-11861 https://nvd.nist.gov/vuln/detail/CVE-2026-11861

Ссылки1

ALT-PU-2026-18151 https://errata.altlinux.org/ALT-PU-2026-18151

Связанные уязвимости

RLSA-2026:83460

rocky

26 дней назад

Critical: idm:DL1 security, bug fix, and enhancement update

RLSA-2026:72279

rocky

около 1 месяца назад

Critical: ipa security, bug fix, and enhancement update

RLSA-2026:70564

rocky

около 2 месяцев назад

Critical: ipa security, bug fix, and enhancement update

ELSA-2026-83460

oracle-oval

26 дней назад

ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL)

ELSA-2026-72279

oracle-oval

около 1 месяца назад

ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL)