Back Linuxsecurity

Fedora 43 lemonldap-ng Update Open Redirect Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • August 2, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It

simplifies the build of a protected area with a few changes in the

application. It manages both authentication and authorization and provides

headers for accounting.

So you can have a full AAA protection for your web space as described below.

Update to 2.23.2 Update to 2.23.1, fixes CVE-2026-12804

* Fri Jul 24 2026 Clement Oudot - 2.23.2-1 - Update to 2.23.2 * Wed Jul 22 2026 Clement Oudot - 2.23.1-1 - Update to 2.23.1 * Thu Jul 16 2026 Fedora Release Engineering - 2.23.0-1.1 - Rebuilt for

[ 1 ] Bug #2491282 - CVE-2026-12804 lemonldap-ng: Lemonldap-NG: Open Redirect via URL manipulation in SAML Common Domain Cookie Endpoint [epel-all] [ 2 ] Bug #2491283 - CVE-2026-12804 lemonldap-ng: Lemonldap-NG: Open Redirect via URL manipulation in SAML Common Domain Cookie Endpoint [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1f595e8eb4' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora LemonLDAP-ng Updates Address Open Redirect Vulnerability CVE-2026-12804 Fedora has released updates for LemonLDAP-ng versions 2.23.1 and 2.23.2 to address CVE-2026-12804, which is an Open Redirect vulnerability. This flaw allows attackers to manipulate URLs in the SAML Common Domain Cookie Endpoint, potentially leading to unauthorized access. The vulnerability was published on June 21, 2026, and affects users of the LemonLDAP-ng web single sign-on solution. Users are advised to upgrade to the latest versions to mitigate risks associated with this vulnerability. The updates were made available through the dnf package manager. The updates were confirmed by developer Clement Oudot and the Fedora Release Engineering team. Organizations using affected versions are at risk of exploitation if they do not apply the patches promptly. 2 sources 46

Extracted Entities

Fedora 43 lemonldap-ng Update Open Redirect Fix CVE-2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (2)

Vulnerabilities (1)