Red Hat Product Errata RHBA-2026:4897 - Bug Fix Advisory
Issued:
2026-03-18
Updated:
2026-03-18

RHBA-2026:4897 - Bug Fix Advisory

Synopsis

ipa bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ipa is now available for Red Hat Enterprise Linux 10.

Description

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Bug Fix(es) and Enhancement(s):

  • ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate (JIRA:RHEL-107483)
  • Fix ipatests for kdcproxy after CVE-2025-59088 fix [rhel-10.1.z] (JIRA:RHEL-129968)
  • AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks [rhel-10.1.z] (JIRA:RHEL-141303)
  • Memory leaks in IPA plugins [rhel-10.1.z] (JIRA:RHEL-141317)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 10

SRPM
ipa-4.12.2-24.el10_1.2.src.rpm SHA-256: e118fb8db40c7ec97a3c6fb2bccf40d976f3fe6a606ff764ecaf40846dd58e85
x86_64
ipa-client-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: a965ff6c66c0b016a46663bfa90a7fb2adeb1b65e51b43f0d2e8135c06c3fdfb
ipa-client-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 80e133da972336005cb7c720d6f08de071d394ea55b56130db543f1b4828177a
ipa-client-debuginfo-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: 7c71dad974bcb4d6ab30f8841c49b462a516fbf34fb141ff2a21ffa6d72755be
ipa-client-encrypted-dns-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: caec2a409842558d43193545c30aa016c064ab0637d3f9e1053205f467633c1f
ipa-client-epn-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: 8acac84674e14faef43ee3317bf0947eae555d38ac728b242102d317b38b005f
ipa-client-samba-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: cdabe430ed67f32511043bd5f39377cd702b1ccf7743ab9e03eb54b176ae79a1
ipa-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: a3887ea5f831f731a51ea3f161fb4096b5043a00c55ddda9ee988708419668d2
ipa-debuginfo-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: cf1b2a06d9816e498973e9d4e0ec214f8ce9ed6428cd06cad68649419655b852
ipa-debugsource-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: ac1cae9feed3ddeece45b106fb6fc3cd7dbcfa2a4973ccf1ade1c0d25112c920
ipa-selinux-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 2cfc5da2a485faa5901e11bc1f38d559b6dcd4b3eb051c662f17fda55e0438c9
ipa-selinux-luna-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 21daffd48c1a761a13420c08f8e732969cda3c119e8197087eb360d6b329f910
ipa-selinux-nfast-4.12.2-24.el10_1.2.noarch.rpm SHA-256: c44e1524635922c60c6b08b2580693d083b74cd4b1da7358902a44d55f8057ea
ipa-server-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: 9703214cfd9bcd0028e6ce4f9975c76f3986e3b11cc988552016414e671765c6
ipa-server-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0500c0ce43506816f7acf4c358c82e98a9e7d44d71d907d2d9322196e21b93a7
ipa-server-debuginfo-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: 988d2ca696dad809c634e1b4c6d33e884e65f85976e8951cf6355561fc94b6b2
ipa-server-dns-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 8f0d774119289f7eab441b4b1a1163b74d45df0082a0f265d63f4dc685d4b569
ipa-server-encrypted-dns-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: 07f1abb9efc728f53ad7fd2da26eec439f39f85df761890e84f6ad710f06f3ed
ipa-server-trust-ad-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: b9eaca905dfc182fd641c6ab847a3d40dd46e4955a539232b3585fcc442dddc4
ipa-server-trust-ad-debuginfo-4.12.2-24.el10_1.2.x86_64.rpm SHA-256: ca4b08e3d1e75a521b07f5cf258f541fefa3f41906cf41c3aa8556feebe2274b
python3-ipaclient-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 627be9cfe8c113b30027639e5e06c0bc946e473ee9dc3fd4b9acbd5b02dcef4d
python3-ipalib-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0d141bc96d6f4f8d777f63a590fec9e45f2b24407236485eb00c3bd6a2caa4c3
python3-ipaserver-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 7ceaf54ab82bdc58e71c974c392203b87bc2d3d7b67bd37a60e1319ea838a501

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
ipa-4.12.2-24.el10_1.2.src.rpm SHA-256: e118fb8db40c7ec97a3c6fb2bccf40d976f3fe6a606ff764ecaf40846dd58e85
s390x
ipa-client-4.12.2-24.el10_1.2.s390x.rpm SHA-256: f1ecbc6228789ca6e3a83207ea51bbef84aa9061f695e20ae26791ceb971c57b
ipa-client-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 80e133da972336005cb7c720d6f08de071d394ea55b56130db543f1b4828177a
ipa-client-debuginfo-4.12.2-24.el10_1.2.s390x.rpm SHA-256: 6cb86846ae7de396a23649fd1be76951d07b15dde1da33b691710b191ccb42c2
ipa-client-encrypted-dns-4.12.2-24.el10_1.2.s390x.rpm SHA-256: b898caeb53ffd34cf8f46e6e89ca63bf21edb39b3489fa3dc0354062091de144
ipa-client-epn-4.12.2-24.el10_1.2.s390x.rpm SHA-256: bb18960250a8209440487237032cd90c3a589cca7789b85d1165a061a90f3553
ipa-client-samba-4.12.2-24.el10_1.2.s390x.rpm SHA-256: f99ef0856ef7114ae90f39ea5bcd6c82194e9a8c02d4503fd0c68ff18a1b3407
ipa-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: a3887ea5f831f731a51ea3f161fb4096b5043a00c55ddda9ee988708419668d2
ipa-debuginfo-4.12.2-24.el10_1.2.s390x.rpm SHA-256: e386fc99f4ab0b1c6a30264a85e6cb9df89dbb4d038662e1a4d0e7247a06bd40
ipa-debugsource-4.12.2-24.el10_1.2.s390x.rpm SHA-256: c0eed320886f3b4a62936a5919ae71ab342fb2a281a19ee3707995d2c2745be3
ipa-selinux-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 2cfc5da2a485faa5901e11bc1f38d559b6dcd4b3eb051c662f17fda55e0438c9
ipa-selinux-luna-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 21daffd48c1a761a13420c08f8e732969cda3c119e8197087eb360d6b329f910
ipa-selinux-nfast-4.12.2-24.el10_1.2.noarch.rpm SHA-256: c44e1524635922c60c6b08b2580693d083b74cd4b1da7358902a44d55f8057ea
ipa-server-4.12.2-24.el10_1.2.s390x.rpm SHA-256: 45b818c4ed65b247ee88e3084ce453c11c16ac1fbeff6e2e8e9798bd80002be2
ipa-server-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0500c0ce43506816f7acf4c358c82e98a9e7d44d71d907d2d9322196e21b93a7
ipa-server-debuginfo-4.12.2-24.el10_1.2.s390x.rpm SHA-256: 02332b936a4e6f8909c537cad44886ae93e2dca1f682662fa2b1474b881dd87c
ipa-server-dns-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 8f0d774119289f7eab441b4b1a1163b74d45df0082a0f265d63f4dc685d4b569
ipa-server-encrypted-dns-4.12.2-24.el10_1.2.s390x.rpm SHA-256: ad7bc8ea411550ca43ce7b4d839724ad29a018e1a28d0b1c99360362248083ed
ipa-server-trust-ad-4.12.2-24.el10_1.2.s390x.rpm SHA-256: 08a642669395fa54a751c9f8240cce44f0311fd128757d503fd3f109d11cc1cb
ipa-server-trust-ad-debuginfo-4.12.2-24.el10_1.2.s390x.rpm SHA-256: 9af587617a7b297598b30897d7e5b3f0752a6e65facac3264f34de3d37e7c8d9
python3-ipaclient-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 627be9cfe8c113b30027639e5e06c0bc946e473ee9dc3fd4b9acbd5b02dcef4d
python3-ipalib-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0d141bc96d6f4f8d777f63a590fec9e45f2b24407236485eb00c3bd6a2caa4c3
python3-ipaserver-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 7ceaf54ab82bdc58e71c974c392203b87bc2d3d7b67bd37a60e1319ea838a501

Red Hat Enterprise Linux for Power, little endian 10

SRPM
ipa-4.12.2-24.el10_1.2.src.rpm SHA-256: e118fb8db40c7ec97a3c6fb2bccf40d976f3fe6a606ff764ecaf40846dd58e85
ppc64le
ipa-client-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: b794c72f789b549b15d59e344d7722259f80ba714422c8bc665bde20281d75fd
ipa-client-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 80e133da972336005cb7c720d6f08de071d394ea55b56130db543f1b4828177a
ipa-client-debuginfo-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: 400bfcb768d20700b4b3171bb7fc5c6edb9ea662c9f0c49afda273ef8ccc40ae
ipa-client-encrypted-dns-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: ebdd08177d21cbebd85fea7c2d3ff9c6045e0557a59361e41de085befd3fbd11
ipa-client-epn-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: f18c78cf33b9c7086b40fdc4befdd2e5d81bcfe1f1b4659cf52023690797ab1c
ipa-client-samba-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: ccf70775d0fea548491c22b01672169cc3226f3c208728e261d2e3238df543f7
ipa-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: a3887ea5f831f731a51ea3f161fb4096b5043a00c55ddda9ee988708419668d2
ipa-debuginfo-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: 43cc18a77dbfb6a8a7e729a09030f32f9f4186f2587b92662a4fccab6b96fb81
ipa-debugsource-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: d35b22d2c20fe04a82c73c63b95e9470b8b732bb4e78d708c005f14c4b0cce2a
ipa-selinux-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 2cfc5da2a485faa5901e11bc1f38d559b6dcd4b3eb051c662f17fda55e0438c9
ipa-selinux-luna-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 21daffd48c1a761a13420c08f8e732969cda3c119e8197087eb360d6b329f910
ipa-selinux-nfast-4.12.2-24.el10_1.2.noarch.rpm SHA-256: c44e1524635922c60c6b08b2580693d083b74cd4b1da7358902a44d55f8057ea
ipa-server-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: 023988a4f9075e38c8d7f04a50c545cc2f167b6f296535572f2a77e17b98d1d7
ipa-server-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0500c0ce43506816f7acf4c358c82e98a9e7d44d71d907d2d9322196e21b93a7
ipa-server-debuginfo-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: 06f6a76d0a1a1d3ffc11352f8c263729f70125b1998f7ac80f0142b8c3432496
ipa-server-dns-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 8f0d774119289f7eab441b4b1a1163b74d45df0082a0f265d63f4dc685d4b569
ipa-server-encrypted-dns-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: 45b9ebf3fddc06e392c2fa1841bf6e8b34a4f3e8b383cd1e8a06660248a30c47
ipa-server-trust-ad-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: 8d40291d8ac2af1757a4f0097f45fb4ca20c2039ae1dffba39fad9511eaeadf4
ipa-server-trust-ad-debuginfo-4.12.2-24.el10_1.2.ppc64le.rpm SHA-256: fce35246d680b2cc356c7bfac53f47d140e0d23279f2d49fef65a237ce2a4d5d
python3-ipaclient-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 627be9cfe8c113b30027639e5e06c0bc946e473ee9dc3fd4b9acbd5b02dcef4d
python3-ipalib-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0d141bc96d6f4f8d777f63a590fec9e45f2b24407236485eb00c3bd6a2caa4c3
python3-ipaserver-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 7ceaf54ab82bdc58e71c974c392203b87bc2d3d7b67bd37a60e1319ea838a501

Red Hat Enterprise Linux for ARM 64 10

SRPM
ipa-4.12.2-24.el10_1.2.src.rpm SHA-256: e118fb8db40c7ec97a3c6fb2bccf40d976f3fe6a606ff764ecaf40846dd58e85
aarch64
ipa-client-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 41ad90db0b7b1b4a28bf1ae857e0fe4b35fbece119c7a7bcf468a013476e18e5
ipa-client-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 80e133da972336005cb7c720d6f08de071d394ea55b56130db543f1b4828177a
ipa-client-debuginfo-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 33d2d76753b2e7f05b51c8b00b9f3592aeacedd35c1c348605b13032302e4e63
ipa-client-encrypted-dns-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 37029e09e65f2c60683faf38eea80d2b51552c3cf5045e03727cfdfab8e31354
ipa-client-epn-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 51113a30095e4a49f1804f2cbc2ddb65cbc7baa9eb69b87108af0310c59699e8
ipa-client-samba-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 417b0c68094e0eac013017ca623bfc37c4dc81899b18090acf8335b1d7654b00
ipa-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: a3887ea5f831f731a51ea3f161fb4096b5043a00c55ddda9ee988708419668d2
ipa-debuginfo-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 20104686d0d72741ac1e48c38e38b9b77720f6dfad6b70c114ae50a40c838272
ipa-debugsource-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: e0cbe3fb9540c285d6156af92a5c9e90df18a6653cfb23487bd68371ab10981c
ipa-selinux-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 2cfc5da2a485faa5901e11bc1f38d559b6dcd4b3eb051c662f17fda55e0438c9
ipa-selinux-luna-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 21daffd48c1a761a13420c08f8e732969cda3c119e8197087eb360d6b329f910
ipa-selinux-nfast-4.12.2-24.el10_1.2.noarch.rpm SHA-256: c44e1524635922c60c6b08b2580693d083b74cd4b1da7358902a44d55f8057ea
ipa-server-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 29a94cc2fadc52c6662adf419c76149710d8cd10a03e0f6bd27eadda589ef5a2
ipa-server-common-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0500c0ce43506816f7acf4c358c82e98a9e7d44d71d907d2d9322196e21b93a7
ipa-server-debuginfo-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: afd774b4f25c14c0482fbd13804c3450e7155d759031d4f07b202de91071ceda
ipa-server-dns-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 8f0d774119289f7eab441b4b1a1163b74d45df0082a0f265d63f4dc685d4b569
ipa-server-encrypted-dns-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: b74ee79327a07e83a99430fa32c204f77aef7d2c13025e7fba9eb0e876fc7897
ipa-server-trust-ad-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 9b4c5fba33afda6d9892e6432a3ee7423f056c813891498fdab5866d4565c80d
ipa-server-trust-ad-debuginfo-4.12.2-24.el10_1.2.aarch64.rpm SHA-256: 6fdb72e90c54995c235c10b5da662f7d95821c2573803d4cf61021d7fde3d88c
python3-ipaclient-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 627be9cfe8c113b30027639e5e06c0bc946e473ee9dc3fd4b9acbd5b02dcef4d
python3-ipalib-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 0d141bc96d6f4f8d777f63a590fec9e45f2b24407236485eb00c3bd6a2caa4c3
python3-ipaserver-4.12.2-24.el10_1.2.noarch.rpm SHA-256: 7ceaf54ab82bdc58e71c974c392203b87bc2d3d7b67bd37a60e1319ea838a501

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
python3-ipatests-4.12.2-24.el10_1.2.noarch.rpm SHA-256: e30b458893fa05dce868ea82c7e1598f3d8c4e89fdd2ef6f39b6f96af150abae

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
python3-ipatests-4.12.2-24.el10_1.2.noarch.rpm SHA-256: e30b458893fa05dce868ea82c7e1598f3d8c4e89fdd2ef6f39b6f96af150abae

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
python3-ipatests-4.12.2-24.el10_1.2.noarch.rpm SHA-256: e30b458893fa05dce868ea82c7e1598f3d8c4e89fdd2ef6f39b6f96af150abae

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
python3-ipatests-4.12.2-24.el10_1.2.noarch.rpm SHA-256: e30b458893fa05dce868ea82c7e1598f3d8c4e89fdd2ef6f39b6f96af150abae

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.