The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade ipa-selinuxUpgrade ipa-selinux-lunaUpgrade ipa-server-trust-adUpgrade ipa-client-sambaUpgrade slapi-nisUpgrade python3-ipatestsUpgrade opendnssecUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade ipa-server-encrypted-dnsUpgrade softhsm-develUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-selinux-nfastUpgrade custodiaUpgrade python3-yubicoUpgrade ipa-client-encrypted-dnsUpgrade python3-qrcodeUpgrade bind-dyndb-ldapUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade softhsmUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade python3-custodiaUpgrade ipa-server-dnsUpgrade ipa-client-common | Oct 11, 2026 | Sep 23, 2026 |
| Amazon Linux Ami 2 | — | Upgrade ipa-serverUpgrade python2-ipalibUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-server-common | Oct 19, 2026 | Oct 19, 2026 |
| Freebsd | — | Upgrade freeipa-server | Sep 18, 2026 | Sep 11, 2026 |
| Oracle_linux | — | Upgrade softhsm-develUpgrade ipa-server-dnsUpgrade python3-yubicoUpgrade ipa-healthcheckUpgrade ipa-client-epnUpgrade ipa-selinuxUpgrade ipa-healthcheck-coreUpgrade python3-custodiaUpgrade ipa-selinux-nfastUpgrade ipa-clientUpgrade python3-kdcproxyUpgrade ipa-selinux-lunaUpgrade ipa-python-compatUpgrade ipa-server-trust-adUpgrade slapi-nisUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-server-encrypted-dnsUpgrade python3-pyusbUpgrade python3-ipalibUpgrade bind-dyndb-ldapUpgrade ipa-client-commonUpgrade softhsmUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade python3-qrcodeUpgrade python3-ipatestsUpgrade ipa-commonUpgrade python3-ipaclientUpgrade python3-qrcode-coreUpgrade ipa-client-encrypted-dnsUpgrade opendnssecUpgrade custodia | Oct 22, 2026 | Aug 20, 2026 |
| Redhat_linux | — | Upgrade ipa-server-encrypted-dnsUpgrade python3-ipaclientUpgrade python3-qrcode-coreUpgrade ipa-serverUpgrade ipa-server-debuginfoUpgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-clientUpgrade python3-yubicoUpgrade opendnssecUpgrade softhsm-debugsourceUpgrade softhsm-develUpgrade softhsmUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-debuginfoUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldapUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade ipa-selinux-nfastUpgrade ipa-debuginfoUpgrade python3-ipalibUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade custodiaUpgrade ipa-debugsourceUpgrade ipa-selinuxUpgrade slapi-nis-debugsourceNo solution existsUpgrade softhsm-debuginfoUpgrade python3-ipatestsUpgrade opendnssec-debuginfoUpgrade python3-ipaserverUpgrade ipa-selinux-lunaUpgrade slapi-nis-debuginfoUpgrade ipa-client-encrypted-dnsUpgrade slapi-nisUpgrade ipa-client-epnUpgrade ipa-commonUpgrade python3-custodiaUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-sambaUpgrade ipa-healthcheck | Aug 24, 2026 | Aug 20, 2026 |
| Rocky_linux | — | Upgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-encrypted-dnsUpgrade slapi-nis-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-serverUpgrade ipa-client-epnUpgrade ipa-debuginfoUpgrade softhsm-debuginfoUpgrade slapi-nis-debugsourceUpgrade softhsm-develUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-sambaUpgrade opendnssec-debuginfoUpgrade ipa-clientUpgrade bind-dyndb-ldapUpgrade softhsmUpgrade ipa-server-debuginfoUpgrade ipa-server-encrypted-dnsUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade opendnssecUpgrade ipa-debugsourceUpgrade slapi-nisUpgrade opendnssec-debugsourceUpgrade ipa-server-trust-ad | Sep 28, 2026 | Sep 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub