Red Hat Product Errata RHBA-2026:4198 - Bug Fix Advisory
Issued:
2026-03-10
Updated:
2026-03-10

RHBA-2026:4198 - Bug Fix Advisory

Synopsis

ipa bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ipa is now available for Red Hat Enterprise Linux 9.

Description

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Bug Fix(es) and Enhancement(s):

  • test_cacert_manage fails due to expired Let's Encrypt R3 certificate [rhel-9.7.z] (JIRA:RHEL-124424)
  • Fix ipatests for kdcproxy after CVE-2025-59088 fix [rhel-9.7.z] (JIRA:RHEL-129963)
  • AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks [rhel-9.7.z] (JIRA:RHEL-141314)
  • Memory leaks in IPA plugins [rhel-9.7.z] (JIRA:RHEL-141322)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
ipa-4.12.2-22.el9_7.3.src.rpm SHA-256: 902e330104c512bad417eaf221134b298e82ac52f123b44ad7ca03e8ea2029d5
x86_64
ipa-client-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: d4c7eb09c4d32261ade5fae079cef9230a6584532f5d36c37772a4019b1cb096
ipa-client-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 270d9cfbeaa49ad579eeebeef7de25cf50601b8259d09f181a2f7adbe438114c
ipa-client-debuginfo-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 4f6c795fbb34063512fffafa64864b050ce893f36adefbfeeb69545aa5ea112a
ipa-client-encrypted-dns-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 6e10ed57a8fa18f338850daa72c5be662aec331f51171bb0aea0f274ac56ae66
ipa-client-epn-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 825c0cc315214f63dfdfbfc9bb6555ae2414eea067daa7eeb6345beb508b24b0
ipa-client-samba-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 7e67f597fe528dbdf64d04513366858c0951dba85987dc3109cac4dd1421b20c
ipa-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: b827d5c7ffd50cc9d66546cf1b473d26ab8a7bd3bd44306c81bc239dae0f3d5f
ipa-debuginfo-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 5409d293c68aa0f25146b1f069c1de03b5da478a7b685a0187fcff749c187f17
ipa-debugsource-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 5077aa9b3a5cc1871292da1fe43de87509f88bd3a62f4c1175c4f65a39f73bfe
ipa-selinux-4.12.2-22.el9_7.3.noarch.rpm SHA-256: c824226105a7e49e14f8c5ef7a322d3079dd4442367ef5bdcc754dd98febb65d
ipa-selinux-luna-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 2afec1f848b9c9878c87299d979a1c8913924ec4d3903dad558aa1a91d45c7bb
ipa-selinux-nfast-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 881a404342544a23d8281aa33aaac1a1c07aedff7e0c00dc9ddf6cd79f774574
ipa-server-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: d680b07cf255f7e00535de99dab98b39b6d186d13f9e7e32a8328ff9571b3c0f
ipa-server-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: adc14c03958b8fa7aca9661c8d6a88c173526671686f38b3b835eddf52e65a35
ipa-server-debuginfo-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 2d23cefcc70d6f7b6a01c412a47d02b652796fd7ea21a09d0a74079552ad8862
ipa-server-dns-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 3f1771de367c0300c72e876e4fe66b5bbd1ea9651a468537bcef98457f0adbb5
ipa-server-encrypted-dns-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 410448d20e515680de9332f801d8f555a8591d56121a0f63101f7bde8854a615
ipa-server-trust-ad-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: 9c773e4bafd872206ce08eba7a72fa7313643f442036b84fa258e8d0dbf12e37
ipa-server-trust-ad-debuginfo-4.12.2-22.el9_7.3.x86_64.rpm SHA-256: fcaecdf569e5d770e52aa4212346d410118d82b0eddb920df00cf4e855b9eab3
python3-ipaclient-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 617658ae3431ed42ac7c0d32983efd6e33e9378699d280f223ec48232565589e
python3-ipalib-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 93567db9742509b1212bb6c767b80b92e911c5242ae39393bff2aabfd3a47678
python3-ipaserver-4.12.2-22.el9_7.3.noarch.rpm SHA-256: dce382da0ec061e673f6b4b924f8106f3bbb2735993dfcc32fa73184ceccafc9

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
ipa-4.12.2-22.el9_7.3.src.rpm SHA-256: 902e330104c512bad417eaf221134b298e82ac52f123b44ad7ca03e8ea2029d5
s390x
ipa-client-4.12.2-22.el9_7.3.s390x.rpm SHA-256: e55cbf993d153c0b299f20afd6041ec99ee49ac3ca34df4f115fd4b1d64f955e
ipa-client-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 270d9cfbeaa49ad579eeebeef7de25cf50601b8259d09f181a2f7adbe438114c
ipa-client-debuginfo-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 455966a6370b39d6fe7bd37c91bbd076a12d3eec05604b26e1297fa56a023360
ipa-client-encrypted-dns-4.12.2-22.el9_7.3.s390x.rpm SHA-256: ecbb5ac56977eb9dfca0fe0a9d446449a4c997b9d255a34a3c34f500e8bbdeea
ipa-client-epn-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 6e209c41be2fccc556eaf7577be742c0307e168520b8e4574ad12ce56b11c285
ipa-client-samba-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 311f8216d4c49bab013b545774ce775918e87eea11c34c66ff1711c89a0031fe
ipa-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: b827d5c7ffd50cc9d66546cf1b473d26ab8a7bd3bd44306c81bc239dae0f3d5f
ipa-debuginfo-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 5478f5b2a69f3b82925cf523ecc942873c8188802815e51445aa8f72da1acb11
ipa-debugsource-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 159d1e2d1459cb8a4a9b7531166568d254f627b102623325d068ef20b3a7d9e0
ipa-selinux-4.12.2-22.el9_7.3.noarch.rpm SHA-256: c824226105a7e49e14f8c5ef7a322d3079dd4442367ef5bdcc754dd98febb65d
ipa-selinux-luna-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 2afec1f848b9c9878c87299d979a1c8913924ec4d3903dad558aa1a91d45c7bb
ipa-selinux-nfast-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 881a404342544a23d8281aa33aaac1a1c07aedff7e0c00dc9ddf6cd79f774574
ipa-server-4.12.2-22.el9_7.3.s390x.rpm SHA-256: ebdb51623df8436bc09ddcd5b686c97775ac151351339b1b79009ead6b8621d7
ipa-server-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: adc14c03958b8fa7aca9661c8d6a88c173526671686f38b3b835eddf52e65a35
ipa-server-debuginfo-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 20e327a43f5753a8ac94f21e1196970672d8f3b2c0417a0f3b920beaacf2da05
ipa-server-dns-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 3f1771de367c0300c72e876e4fe66b5bbd1ea9651a468537bcef98457f0adbb5
ipa-server-encrypted-dns-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 5fcd2989f5c40a3335f4abe38c353dbb74259523d6ba2efea7828f250c267e46
ipa-server-trust-ad-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 4bcf21c98047f939576da0985c0678aa1334affd0eed849c72ddcec9b54a1bfa
ipa-server-trust-ad-debuginfo-4.12.2-22.el9_7.3.s390x.rpm SHA-256: 95846559018b734a58c70271275549f03bbe7dd0d9012baff099124f73a49854
python3-ipaclient-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 617658ae3431ed42ac7c0d32983efd6e33e9378699d280f223ec48232565589e
python3-ipalib-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 93567db9742509b1212bb6c767b80b92e911c5242ae39393bff2aabfd3a47678
python3-ipaserver-4.12.2-22.el9_7.3.noarch.rpm SHA-256: dce382da0ec061e673f6b4b924f8106f3bbb2735993dfcc32fa73184ceccafc9

Red Hat Enterprise Linux for Power, little endian 9

SRPM
ipa-4.12.2-22.el9_7.3.src.rpm SHA-256: 902e330104c512bad417eaf221134b298e82ac52f123b44ad7ca03e8ea2029d5
ppc64le
ipa-client-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: 930706883778f7baeda2a451cd1d8e0e5b9e93469306a63e95392686c30f8dd9
ipa-client-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 270d9cfbeaa49ad579eeebeef7de25cf50601b8259d09f181a2f7adbe438114c
ipa-client-debuginfo-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: b796816b084ba8f173cbda5842b7193a756415e9581d024f738f1f57675fbdb7
ipa-client-encrypted-dns-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: 9d10ba31d6b355fedbbc05541d60e83ca87f469f87ea91eb9ddb5564cad11bfb
ipa-client-epn-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: 2683335c369e858abbeeb4d9237b5936bcf5a698dd31a3528bff01e9123f4c80
ipa-client-samba-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: 90332712d5c47211a37cbaa6388a40e70991fa50be270f5ea080dfaa28a7886f
ipa-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: b827d5c7ffd50cc9d66546cf1b473d26ab8a7bd3bd44306c81bc239dae0f3d5f
ipa-debuginfo-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: d1470f221dfe8b6a1dfc804e7856b8e8805c444ecc2833114e0e0aeff4f0a479
ipa-debugsource-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: 2fc811999b219ffac4d237077f0c5f6c1d9a6e3944bd482d299d384d52c07203
ipa-selinux-4.12.2-22.el9_7.3.noarch.rpm SHA-256: c824226105a7e49e14f8c5ef7a322d3079dd4442367ef5bdcc754dd98febb65d
ipa-selinux-luna-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 2afec1f848b9c9878c87299d979a1c8913924ec4d3903dad558aa1a91d45c7bb
ipa-selinux-nfast-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 881a404342544a23d8281aa33aaac1a1c07aedff7e0c00dc9ddf6cd79f774574
ipa-server-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: 8bd7b2814be0a3bac44fcd1ded50b89bd9e6be1e76e6a1d801f8a85f2e387d41
ipa-server-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: adc14c03958b8fa7aca9661c8d6a88c173526671686f38b3b835eddf52e65a35
ipa-server-debuginfo-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: e5b086f6ca88919ae356abfee299605c8c09439f5d4de471612fe51112be7c0c
ipa-server-dns-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 3f1771de367c0300c72e876e4fe66b5bbd1ea9651a468537bcef98457f0adbb5
ipa-server-encrypted-dns-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: 21b03d2c494d1e1cd3740120f1f6975bd3323603b97162751d27298db1437147
ipa-server-trust-ad-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: a5565e338aa60c472ba9fa189c083497f8a8320d01efd52db0ac8ed577d1621e
ipa-server-trust-ad-debuginfo-4.12.2-22.el9_7.3.ppc64le.rpm SHA-256: bb442a47dcd84816fca285d0c729bca4a79f86ca1d0f5b98e2616e90c89010e9
python3-ipaclient-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 617658ae3431ed42ac7c0d32983efd6e33e9378699d280f223ec48232565589e
python3-ipalib-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 93567db9742509b1212bb6c767b80b92e911c5242ae39393bff2aabfd3a47678
python3-ipaserver-4.12.2-22.el9_7.3.noarch.rpm SHA-256: dce382da0ec061e673f6b4b924f8106f3bbb2735993dfcc32fa73184ceccafc9

Red Hat Enterprise Linux for ARM 64 9

SRPM
ipa-4.12.2-22.el9_7.3.src.rpm SHA-256: 902e330104c512bad417eaf221134b298e82ac52f123b44ad7ca03e8ea2029d5
aarch64
ipa-client-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: fd88c661ff5743b304d0b0eb8150c6caad312386ecdf4c9c1a14254b146f7578
ipa-client-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 270d9cfbeaa49ad579eeebeef7de25cf50601b8259d09f181a2f7adbe438114c
ipa-client-debuginfo-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: 0554d4c89085fa070685ac3bfdb31eba9b4258c50e54556e0264d1800f6ed4f1
ipa-client-encrypted-dns-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: a73f183b166032e24463bd94152dbd67a07735f4a66c308ca9338f49e031aaf9
ipa-client-epn-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: d1f90ab755bf242eee8206d85bbd1a3089fa20c4e10b0a9bf690de5f87304fdb
ipa-client-samba-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: 4ddd1929dfc5bbe018eba8e70851936ed44f8aebf733f809deca4d51831a4904
ipa-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: b827d5c7ffd50cc9d66546cf1b473d26ab8a7bd3bd44306c81bc239dae0f3d5f
ipa-debuginfo-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: e28ab712ab3b2253dc3554c8848c1dddada94ecf66155c64e37ea52a44871de3
ipa-debugsource-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: 9d809e19fcf146d710f23b27c758230376ef434b75cbcb0e6a078dbbc7d6491c
ipa-selinux-4.12.2-22.el9_7.3.noarch.rpm SHA-256: c824226105a7e49e14f8c5ef7a322d3079dd4442367ef5bdcc754dd98febb65d
ipa-selinux-luna-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 2afec1f848b9c9878c87299d979a1c8913924ec4d3903dad558aa1a91d45c7bb
ipa-selinux-nfast-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 881a404342544a23d8281aa33aaac1a1c07aedff7e0c00dc9ddf6cd79f774574
ipa-server-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: e14bddef559beb8c2753893a9e56d97c5415b997eff7981a4e82b5cbc5aa3c3e
ipa-server-common-4.12.2-22.el9_7.3.noarch.rpm SHA-256: adc14c03958b8fa7aca9661c8d6a88c173526671686f38b3b835eddf52e65a35
ipa-server-debuginfo-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: b54d982793c0fc5f4ac4899585204c55dee8e0b0d242c4b4469fda6a0268bd29
ipa-server-dns-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 3f1771de367c0300c72e876e4fe66b5bbd1ea9651a468537bcef98457f0adbb5
ipa-server-encrypted-dns-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: 97a00c903bc64c6d9a7528f4a0b84753962f4ff7d675aec5609fdbd4ba3d571e
ipa-server-trust-ad-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: 7bc2a139bc606fa825ac3c79fcf6e1dd3f3c416a3f11e3259a53b2c27a54cdf5
ipa-server-trust-ad-debuginfo-4.12.2-22.el9_7.3.aarch64.rpm SHA-256: 0fde7dfa07c610cfd9db4c544d265484a1de7df3b8b15146cecc54214b1773b2
python3-ipaclient-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 617658ae3431ed42ac7c0d32983efd6e33e9378699d280f223ec48232565589e
python3-ipalib-4.12.2-22.el9_7.3.noarch.rpm SHA-256: 93567db9742509b1212bb6c767b80b92e911c5242ae39393bff2aabfd3a47678
python3-ipaserver-4.12.2-22.el9_7.3.noarch.rpm SHA-256: dce382da0ec061e673f6b4b924f8106f3bbb2735993dfcc32fa73184ceccafc9

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
python3-ipatests-4.12.2-22.el9_7.3.noarch.rpm SHA-256: a8935fae657caf4b1fe980e508826a57fd6a56130400ca20d778b1f2da5337b4

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
python3-ipatests-4.12.2-22.el9_7.3.noarch.rpm SHA-256: a8935fae657caf4b1fe980e508826a57fd6a56130400ca20d778b1f2da5337b4

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
python3-ipatests-4.12.2-22.el9_7.3.noarch.rpm SHA-256: a8935fae657caf4b1fe980e508826a57fd6a56130400ca20d778b1f2da5337b4

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
python3-ipatests-4.12.2-22.el9_7.3.noarch.rpm SHA-256: a8935fae657caf4b1fe980e508826a57fd6a56130400ca20d778b1f2da5337b4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.