Red Hat Product Errata RHBA-2026:97645 - Bug Fix Advisory
Issued:
2026-11-10
Updated:
2026-11-10

RHBA-2026:97645 - Bug Fix Advisory

Synopsis

ipa bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ipa is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

  • RHEL-175124 - Rebase Samba to the latest 4.24.x release [rhel-9.9]
  • RHEL-166742 - [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL9.9]
  • RHEL-179216 - ipa-migrate tool is renaming host records & host info in automount information [RHEL 9.9]
  • RHEL-178920 - Rebase ipa to latest version for RHEL 9.9
  • RHEL-212442 - freeipa-client %triggerin and %post can fail (rpm scriptlets should never fail, by policy) [rhel-9]
  • RHEL-212445 - Pagure #9948: Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts [rhel-9]
  • RHEL-212443 - ipa-migrate doesn't properly handle replication conflicts [rhel-9]
  • RHEL-212444 - ipa-migrate doesn't migrate IPA locations [rhel-9]
  • RHEL-212449 - IPA compatibility with tomcat 10 [rhel-9]
  • RHEL-222583 - ipa-server-trust-ad package installation failing for samba dependency.
  • RHEL-177835 - Release Modern UI progress to RHEL 9.9
  • RHEL-240814 - Unable to create users with spaces in the Last Name field in the Modern UI. [rhel-9.9]
  • RHEL-254821 - Include latest fixes in python3-ipatests package [RHEL9.9]

CVEs

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
ipa-4.13.4-1.el9_9.src.rpm SHA-256: 0bb2ad4386736f7abba9ec9b789a5fc78395b9d0bcb17699ce4977ae078159c9
x86_64
ipa-client-4.13.4-1.el9_9.x86_64.rpm SHA-256: 53977034d0ef1cf7748ea758d20dfea96fed5aeefa12df7a325e4b39d81490ad
ipa-client-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 0ed9de88102164a0d73b27d8954d798ca1b4cb4546fbf5a35464586623d31be9
ipa-client-debuginfo-4.13.4-1.el9_9.x86_64.rpm SHA-256: 94f8ac4c75b2a156ee0fcfed86f8765088d6253684781986e645bac50013da17
ipa-client-encrypted-dns-4.13.4-1.el9_9.x86_64.rpm SHA-256: eb233af4f1a292669dde0a9b22c09d1473c537aa382008736f9238990b16afc5
ipa-client-epn-4.13.4-1.el9_9.x86_64.rpm SHA-256: 4e7f96132dbad52915fb269c0f0261bfef351f983b8b46659b4440ad5480a6b0
ipa-client-samba-4.13.4-1.el9_9.x86_64.rpm SHA-256: 9d75a46747731c7636dc9382f05df4ab51c856b165bb293830bc24febd1e28a9
ipa-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 15d8890bfad6f45779ffa37e7aef8214dde67fbfe02fad57bb9ab02752c43290
ipa-debuginfo-4.13.4-1.el9_9.x86_64.rpm SHA-256: a7e2bf05d2586a3b83e6a2dbcdef23abc060c29ee0b47aff8f7bd4614be92a87
ipa-debugsource-4.13.4-1.el9_9.x86_64.rpm SHA-256: 3fff914a910cd20f76adeabd94566c5a6ece247ee34c96ffc35358a25199cbce
ipa-selinux-4.13.4-1.el9_9.noarch.rpm SHA-256: a6fc9d62cd598a893b69826eb340d02fcd4c4c2a0c72353661690dd1f345fa9d
ipa-selinux-luna-4.13.4-1.el9_9.noarch.rpm SHA-256: ff56e674850c87f48fcb934b0aed925168a2430d727c530e46dca5f7b4561d19
ipa-selinux-nfast-4.13.4-1.el9_9.noarch.rpm SHA-256: dafb7e6f479919eabc91c8c3179bb949d23b232c8fadb7448c03dedf137482c9
ipa-server-4.13.4-1.el9_9.x86_64.rpm SHA-256: 148dba8e71b085036023f5a2ec6dcd4397e48774304e1cc2b013482573665757
ipa-server-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 783ef79a5f803971a0337b510c5ab3a61ec0892c4d7ae53f79b2d9627c758665
ipa-server-debuginfo-4.13.4-1.el9_9.x86_64.rpm SHA-256: 5b5e840618a35ef93cc894615acef682d0488624cc2cc64e3231cbabe76c351c
ipa-server-dns-4.13.4-1.el9_9.noarch.rpm SHA-256: e3fe5b458fbf0738cace42e11af762a6da8ca4f20f244341ecaea18aea42adcb
ipa-server-encrypted-dns-4.13.4-1.el9_9.x86_64.rpm SHA-256: d4d25ec2d5d4d7062d6624150804cf9bf861be2b171a092700c7a3dd31da8013
ipa-server-trust-ad-4.13.4-1.el9_9.x86_64.rpm SHA-256: 8fc5ab3fef6ad7d4aaaf6c332d701526b7d59cf869cb4b0b5bb2f72be40359af
ipa-server-trust-ad-debuginfo-4.13.4-1.el9_9.x86_64.rpm SHA-256: eaa364a09afa204f1cda3f80368a55f94c983c4e7890fb998cd0cb9924276205
python3-ipaclient-4.13.4-1.el9_9.noarch.rpm SHA-256: cccbf0f02c13b9119cbaf2be373723e00537359a0ec1c834f9399d1ae7545463
python3-ipalib-4.13.4-1.el9_9.noarch.rpm SHA-256: 54b6d5cf503d77dedb20ba21abcdb0a02fd9a19a82a22c45940586f41bb5e3c4
python3-ipaserver-4.13.4-1.el9_9.noarch.rpm SHA-256: 39340cb82418c9dff4d014ba31efd3d1b1ac6fe397804e81408bbeb90a1aca61

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
ipa-4.13.4-1.el9_9.src.rpm SHA-256: 0bb2ad4386736f7abba9ec9b789a5fc78395b9d0bcb17699ce4977ae078159c9
s390x
ipa-client-4.13.4-1.el9_9.s390x.rpm SHA-256: eb4508ee9892c90141555163235d26d1c73b237822e27d1c6d8cc4c57375725a
ipa-client-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 0ed9de88102164a0d73b27d8954d798ca1b4cb4546fbf5a35464586623d31be9
ipa-client-debuginfo-4.13.4-1.el9_9.s390x.rpm SHA-256: 98e1ce75314e787e29fa6bfe4a0c62382d212aa5ef53e42dd3dda0bb8fcb342d
ipa-client-encrypted-dns-4.13.4-1.el9_9.s390x.rpm SHA-256: 5ec0fb47e168d89c5599b839c94aefd7eb4cbe9d20eccf3e8591880f4c177a46
ipa-client-epn-4.13.4-1.el9_9.s390x.rpm SHA-256: 9a23cbf4dee8cc77160fd9d6639d01aec43daffef0f607df35964e3161bc3953
ipa-client-samba-4.13.4-1.el9_9.s390x.rpm SHA-256: 9aa28d92465971eb5472e09042194de0ef4f6ed37934766b16961278cfc5f8ab
ipa-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 15d8890bfad6f45779ffa37e7aef8214dde67fbfe02fad57bb9ab02752c43290
ipa-debuginfo-4.13.4-1.el9_9.s390x.rpm SHA-256: 7f8167ad319dc41625fe2442ee5a8697ac3791032a7c7b773d56d03dc85f5017
ipa-debugsource-4.13.4-1.el9_9.s390x.rpm SHA-256: 3238b549c3743fc67c3311dfe21814161a7f746c8e050cb01cb3e19430e3c343
ipa-selinux-4.13.4-1.el9_9.noarch.rpm SHA-256: a6fc9d62cd598a893b69826eb340d02fcd4c4c2a0c72353661690dd1f345fa9d
ipa-selinux-luna-4.13.4-1.el9_9.noarch.rpm SHA-256: ff56e674850c87f48fcb934b0aed925168a2430d727c530e46dca5f7b4561d19
ipa-selinux-nfast-4.13.4-1.el9_9.noarch.rpm SHA-256: dafb7e6f479919eabc91c8c3179bb949d23b232c8fadb7448c03dedf137482c9
ipa-server-4.13.4-1.el9_9.s390x.rpm SHA-256: bfa2f73c881591b493c2cfdce8cd6daa909f40b0912c9ad3829e478be3dc612d
ipa-server-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 783ef79a5f803971a0337b510c5ab3a61ec0892c4d7ae53f79b2d9627c758665
ipa-server-debuginfo-4.13.4-1.el9_9.s390x.rpm SHA-256: d392ff119c8092fcce2d6212305570be05af96135ef7955ac806d0958d5e3670
ipa-server-dns-4.13.4-1.el9_9.noarch.rpm SHA-256: e3fe5b458fbf0738cace42e11af762a6da8ca4f20f244341ecaea18aea42adcb
ipa-server-encrypted-dns-4.13.4-1.el9_9.s390x.rpm SHA-256: ca732dc6aae19bae4f484cbb6f23e9fda7bdaea1d89b1e85793b6c315be67adb
ipa-server-trust-ad-4.13.4-1.el9_9.s390x.rpm SHA-256: 8931526bbd61c92a21a5d0cbc2cf76c64de0f5b971454d3fc8c8cf7094cdeb69
ipa-server-trust-ad-debuginfo-4.13.4-1.el9_9.s390x.rpm SHA-256: 27a1b8bc4349b44810649b3e9a9fedbe665c13cf803e3e66569d7972502a6b81
python3-ipaclient-4.13.4-1.el9_9.noarch.rpm SHA-256: cccbf0f02c13b9119cbaf2be373723e00537359a0ec1c834f9399d1ae7545463
python3-ipalib-4.13.4-1.el9_9.noarch.rpm SHA-256: 54b6d5cf503d77dedb20ba21abcdb0a02fd9a19a82a22c45940586f41bb5e3c4
python3-ipaserver-4.13.4-1.el9_9.noarch.rpm SHA-256: 39340cb82418c9dff4d014ba31efd3d1b1ac6fe397804e81408bbeb90a1aca61

Red Hat Enterprise Linux for Power, little endian 9

SRPM
ipa-4.13.4-1.el9_9.src.rpm SHA-256: 0bb2ad4386736f7abba9ec9b789a5fc78395b9d0bcb17699ce4977ae078159c9
ppc64le
ipa-client-4.13.4-1.el9_9.ppc64le.rpm SHA-256: 10b3fb9801093b75bd787a1400dd3ad67ecc8db3c1accac84e44ee3a7fcda529
ipa-client-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 0ed9de88102164a0d73b27d8954d798ca1b4cb4546fbf5a35464586623d31be9
ipa-client-debuginfo-4.13.4-1.el9_9.ppc64le.rpm SHA-256: 0041efda2f44e32563551f61e1dba965fc0a451d93304be65136325d37d12f93
ipa-client-encrypted-dns-4.13.4-1.el9_9.ppc64le.rpm SHA-256: c43e5b52572f1022f8cddbd67fc69b0229a1a20e885145aec6b3d6af5c13c6f0
ipa-client-epn-4.13.4-1.el9_9.ppc64le.rpm SHA-256: f3fc074f4de0efe15b9bc4aed975a644ee24b0be02639fb27b688e1a7836d2af
ipa-client-samba-4.13.4-1.el9_9.ppc64le.rpm SHA-256: 0272d0992f78565e4b5774a5b9ffb56de775753f679cf5fea4d943dd15e9645f
ipa-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 15d8890bfad6f45779ffa37e7aef8214dde67fbfe02fad57bb9ab02752c43290
ipa-debuginfo-4.13.4-1.el9_9.ppc64le.rpm SHA-256: 5619857d66a9501d148ec4a0a772886bcea81194341dbc20d6998b8425411642
ipa-debugsource-4.13.4-1.el9_9.ppc64le.rpm SHA-256: f09df1eff844a7e01a99b1f5ceee97b6d32f95674aa2390de842ef740e8ab17d
ipa-selinux-4.13.4-1.el9_9.noarch.rpm SHA-256: a6fc9d62cd598a893b69826eb340d02fcd4c4c2a0c72353661690dd1f345fa9d
ipa-selinux-luna-4.13.4-1.el9_9.noarch.rpm SHA-256: ff56e674850c87f48fcb934b0aed925168a2430d727c530e46dca5f7b4561d19
ipa-selinux-nfast-4.13.4-1.el9_9.noarch.rpm SHA-256: dafb7e6f479919eabc91c8c3179bb949d23b232c8fadb7448c03dedf137482c9
ipa-server-4.13.4-1.el9_9.ppc64le.rpm SHA-256: b0a39c38a4a2827a43f625065226df1d8432466a8d66a47abcd4d47288383919
ipa-server-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 783ef79a5f803971a0337b510c5ab3a61ec0892c4d7ae53f79b2d9627c758665
ipa-server-debuginfo-4.13.4-1.el9_9.ppc64le.rpm SHA-256: 71cf93d797ddc233c3136d7378094b8d7f80eb997a0dc0598448481cdfb750a3
ipa-server-dns-4.13.4-1.el9_9.noarch.rpm SHA-256: e3fe5b458fbf0738cace42e11af762a6da8ca4f20f244341ecaea18aea42adcb
ipa-server-encrypted-dns-4.13.4-1.el9_9.ppc64le.rpm SHA-256: d21472594a1e44426cede336173709bf4ffcc2120d2190c4b7dedee84927c77d
ipa-server-trust-ad-4.13.4-1.el9_9.ppc64le.rpm SHA-256: e46d17d4cf76ee84694afcf683da2811a81df5fd62b8b3b8e2ed806ccb6f4a56
ipa-server-trust-ad-debuginfo-4.13.4-1.el9_9.ppc64le.rpm SHA-256: 3400f1020790c5917e9b2197fcf7eaed3153ef6cc360fe785cd5a40cde3edf41
python3-ipaclient-4.13.4-1.el9_9.noarch.rpm SHA-256: cccbf0f02c13b9119cbaf2be373723e00537359a0ec1c834f9399d1ae7545463
python3-ipalib-4.13.4-1.el9_9.noarch.rpm SHA-256: 54b6d5cf503d77dedb20ba21abcdb0a02fd9a19a82a22c45940586f41bb5e3c4
python3-ipaserver-4.13.4-1.el9_9.noarch.rpm SHA-256: 39340cb82418c9dff4d014ba31efd3d1b1ac6fe397804e81408bbeb90a1aca61

Red Hat Enterprise Linux for ARM 64 9

SRPM
ipa-4.13.4-1.el9_9.src.rpm SHA-256: 0bb2ad4386736f7abba9ec9b789a5fc78395b9d0bcb17699ce4977ae078159c9
aarch64
ipa-client-4.13.4-1.el9_9.aarch64.rpm SHA-256: 738ac12110cab62e6576bcd26f265339131bdb8f89fa98e8469ee37be4ad2eb1
ipa-client-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 0ed9de88102164a0d73b27d8954d798ca1b4cb4546fbf5a35464586623d31be9
ipa-client-debuginfo-4.13.4-1.el9_9.aarch64.rpm SHA-256: 9ab2072d6d7a15987abd4d90db75b43aa70f074958390975c31d9c8b2802b4dd
ipa-client-encrypted-dns-4.13.4-1.el9_9.aarch64.rpm SHA-256: 6e1c64005bed6ce2f8ad77331fe073e55ce4f6e245173f8a5baba777bb610f64
ipa-client-epn-4.13.4-1.el9_9.aarch64.rpm SHA-256: e999fde12e18a515d4c0b80cf83776c8fc897eb19c0527b710930316a5f9ad64
ipa-client-samba-4.13.4-1.el9_9.aarch64.rpm SHA-256: 376127ae045250530924925d23bd25b0695e335de551b3beeb0caa6e65ef3f47
ipa-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 15d8890bfad6f45779ffa37e7aef8214dde67fbfe02fad57bb9ab02752c43290
ipa-debuginfo-4.13.4-1.el9_9.aarch64.rpm SHA-256: b26151105638aad84b046a7d754d9f786337726f8a5b43a3bd92a89bad52caec
ipa-debugsource-4.13.4-1.el9_9.aarch64.rpm SHA-256: 33fcfd85524131131f872fe3835234e457c18f3839b588fd448b57275c5bc17c
ipa-selinux-4.13.4-1.el9_9.noarch.rpm SHA-256: a6fc9d62cd598a893b69826eb340d02fcd4c4c2a0c72353661690dd1f345fa9d
ipa-selinux-luna-4.13.4-1.el9_9.noarch.rpm SHA-256: ff56e674850c87f48fcb934b0aed925168a2430d727c530e46dca5f7b4561d19
ipa-selinux-nfast-4.13.4-1.el9_9.noarch.rpm SHA-256: dafb7e6f479919eabc91c8c3179bb949d23b232c8fadb7448c03dedf137482c9
ipa-server-4.13.4-1.el9_9.aarch64.rpm SHA-256: c2ad2bbb729d153e862adc5638d48ced5a5560522254b3e860475f4a0367986d
ipa-server-common-4.13.4-1.el9_9.noarch.rpm SHA-256: 783ef79a5f803971a0337b510c5ab3a61ec0892c4d7ae53f79b2d9627c758665
ipa-server-debuginfo-4.13.4-1.el9_9.aarch64.rpm SHA-256: 4bfc4bf7a54a015db17f032fdc911d6b688132c26f3f0ad5dc5daf92c5b74e77
ipa-server-dns-4.13.4-1.el9_9.noarch.rpm SHA-256: e3fe5b458fbf0738cace42e11af762a6da8ca4f20f244341ecaea18aea42adcb
ipa-server-encrypted-dns-4.13.4-1.el9_9.aarch64.rpm SHA-256: 2509cbd1766ac4f3d4f6460ba95327664c737913feef468629f6b6938267e384
ipa-server-trust-ad-4.13.4-1.el9_9.aarch64.rpm SHA-256: 9c2e7949ec705ba879cd9bf91985c2524b2e7effa6cad236ec03678ecc21b4c1
ipa-server-trust-ad-debuginfo-4.13.4-1.el9_9.aarch64.rpm SHA-256: a93f33b628f8b0d1d11169dba7120ada56cb0c8f22a6938c8b82fe45a19a8f67
python3-ipaclient-4.13.4-1.el9_9.noarch.rpm SHA-256: cccbf0f02c13b9119cbaf2be373723e00537359a0ec1c834f9399d1ae7545463
python3-ipalib-4.13.4-1.el9_9.noarch.rpm SHA-256: 54b6d5cf503d77dedb20ba21abcdb0a02fd9a19a82a22c45940586f41bb5e3c4
python3-ipaserver-4.13.4-1.el9_9.noarch.rpm SHA-256: 39340cb82418c9dff4d014ba31efd3d1b1ac6fe397804e81408bbeb90a1aca61

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
python3-ipatests-4.13.4-1.el9_9.noarch.rpm SHA-256: 48e7b28769b4e1f97543af741f474b6dd80e3ba55c974d7e61a59b23794973dc

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
python3-ipatests-4.13.4-1.el9_9.noarch.rpm SHA-256: 48e7b28769b4e1f97543af741f474b6dd80e3ba55c974d7e61a59b23794973dc

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
python3-ipatests-4.13.4-1.el9_9.noarch.rpm SHA-256: 48e7b28769b4e1f97543af741f474b6dd80e3ba55c974d7e61a59b23794973dc

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
python3-ipatests-4.13.4-1.el9_9.noarch.rpm SHA-256: 48e7b28769b4e1f97543af741f474b6dd80e3ba55c974d7e61a59b23794973dc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.