The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-clientUpgrade ipa-selinux-nfastUpgrade ipa-server-encrypted-dnsUpgrade ipa-serverUpgrade softhsm-develUpgrade ipa-server-commonUpgrade ipa-commonUpgrade ipa-healthcheckUpgrade python3-jwcryptoUpgrade ipa-selinuxUpgrade python3-ipatestsUpgrade slapi-nisUpgrade ipa-python-compatUpgrade python3-yubicoUpgrade custodiaUpgrade python3-ipaserverUpgrade ipa-client-encrypted-dnsUpgrade ipa-selinux-lunaUpgrade opendnssecUpgrade ipa-server-trust-adUpgrade ipa-client-sambaUpgrade python3-ipalibUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade python3-pyusbUpgrade ipa-client-epnUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade softhsmUpgrade python3-ipaclientUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade ipa-client-commonUpgrade bind-dyndb-ldap | Oct 11, 2026 | Sep 23, 2026 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade ipa-serverUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-commonUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-debuginfo | Oct 19, 2026 | Oct 19, 2026 |
| Freebsd | — | Upgrade freeipa-server | Sep 18, 2026 | Sep 11, 2026 |
| Oracle_linux | — | Upgrade ipa-healthcheckUpgrade ipa-selinuxUpgrade python3-custodiaUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade python3-kdcproxyUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade ipa-client-epnUpgrade ipa-clientUpgrade ipa-selinux-nfastUpgrade ipa-selinux-lunaUpgrade ipa-python-compatUpgrade ipa-serverUpgrade ipa-healthcheck-coreUpgrade python3-yubicoUpgrade python3-ipalibUpgrade opendnssecUpgrade ipa-server-encrypted-dnsUpgrade ipa-commonUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade ipa-client-encrypted-dnsUpgrade python3-ipaclientUpgrade python3-jwcryptoUpgrade python3-ipatestsUpgrade python3-pyusbUpgrade custodiaUpgrade ipa-client-commonUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade python3-qrcodeUpgrade softhsmUpgrade python3-ipaserver | Oct 22, 2026 | Aug 20, 2026 |
| Redhat_linux | — | Upgrade ipa-serverUpgrade ipa-selinux-nfastUpgrade python3-pyusbUpgrade softhsm-debugsourceUpgrade ipa-client-debuginfoUpgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade custodiaUpgrade ipa-server-encrypted-dnsUpgrade python3-ipaclientUpgrade python3-jwcryptoUpgrade python3-ipalibUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade softhsmUpgrade ipa-server-trust-adUpgrade bind-dyndb-ldapUpgrade bind-dyndb-ldap-debuginfoUpgrade opendnssec-debugsourceUpgrade ipa-server-debuginfoUpgrade python3-yubicoUpgrade ipa-healthcheck-coreUpgrade ipa-client-commonUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade ipa-server-commonUpgrade ipa-clientUpgrade ipa-server-dnsUpgrade opendnssecUpgrade python3-ipatestsUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-client-epnUpgrade ipa-client-encrypted-dnsUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade ipa-healthcheckUpgrade python3-custodiaUpgrade ipa-debugsourceUpgrade ipa-client-sambaUpgrade ipa-selinuxUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nis-debuginfoUpgrade python3-ipaserverUpgrade ipa-selinux-lunaNo solution existsUpgrade ipa-commonUpgrade bind-dyndb-ldap-debugsource | Aug 24, 2026 | Aug 20, 2026 |
| Rocky_linux | — | Upgrade opendnssecUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade opendnssec-debugsourceUpgrade ipa-server-encrypted-dnsUpgrade ipa-server-trust-adUpgrade softhsmUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-debugsourceUpgrade softhsm-develUpgrade ipa-clientUpgrade ipa-client-epnUpgrade softhsm-debuginfoUpgrade ipa-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-serverUpgrade slapi-nis-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-encrypted-dnsUpgrade slapi-nis-debuginfoUpgrade opendnssec-debuginfoUpgrade ipa-client-samba | Sep 28, 2026 | Sep 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub