Skip to content
Fedora 44 FreeIPA Samba Security Update Advisory 2026

Fedora 44 FreeIPA Samba Security Update Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • August 25, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

IPA is an integrated solution to provide centrally managed Identity (users,

hosts, services), Authentication (SSO, 2FA), and Authorization

(host access control, SELinux user roles, services). The solution provides

features for further integration with Linux based clients (SUDO, automount)

and integration with Active Directory based infrastructures (Trusts).

Update to Samba 4.24.6 (and rebuild of freeipa) This update contains no changes; it exists purely to keep the Fedora 44 freeipa package higher-versioned than the Fedora 43 package. If it is not, upgrades of FreeIPA from Fedora 43 to 44 fail.

* Fri Aug 21 2026 Alexander Bokovoy - 4.13.3-1.1 - Force upgrade for versions that falsely represent themselves as 4.13.5 (not existing yet) * Thu Aug 20 2026 Alexander Bokovoy - 4.13.3-1 - Upstream release 4.13.3 - Resolves: CVE-2026-11861, CVE-2026-13097, CVE-2026-19550, CVE-2026-73199, CVE-2026-73198, CVE-2026-73197, CVE-2026-73196 * Wed Aug 19 2026 Adam Williamson - 4.13.2-2 - Rebuild without changes to keep version ahead of F43 * Fri Aug 14 2026 Alexander Bokovoy - 4.13.2-2 - Rebuilt for Samba-4.25.0-RC1

* Fri Aug 21 2026 Alexander Bokovoy - 4.13.3-1.1 - Force upgrade for versions that falsely represent themselves as 4.13.5 (not existing yet) * Thu Aug 20 2026 Alexander Bokovoy - 4.13.3-1 - Upstream release 4.13.3 - Resolves: CVE-2026-11861, CVE-2026-13097, CVE-2026-19550, CVE-2026-73199, CVE-2026-73198, CVE-2026-73197, CVE-2026-73196 * Wed Aug 19 2026 Adam Williamson - 4.13.2-2 - Rebuild without changes to keep version ahead of F43 * Fri Aug 14 2026 Alexander Bokovoy - 4.13.2-2 - Rebuilt for Samba-4.25.0-RC1

[ 1 ] Bug #2514054 - CVE-2026-19550 freeipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [fedora-all] [ 2 ] Bug #2520169 - CVE-2026-73196 freeipa: FreeIPA: Authenticated DoS in `otptoken-add` via unbounded OTP key decoding/re-encoding [fedora-all] [ 3 ] Bug #2520170 - CVE-2026-11861 freeipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [fedora-all] [ 4 ] Bug #2520171 - CVE-2026-73197 freeipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [fedora-all] [ 5 ] Bug #2520172 - CVE-2026-73198 freeipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Re...

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-903d904933' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.