Red Hat IPA ELS Update Fixes Six Vulnerabilities
Tech GuruQuick Answer
Red Hat RHSA-2026:93071 fixes six IPA vulnerabilities on RHEL 7 ELS. Inventory subscribed systems, confirm the ELS channel and affected build, install the signed update, restart as directed, validate Kerberos, LDAP, DNS and enrollment workflows, and retain package and change evidence.
Confirm Scope And Apply The Supported Remediation
What to do now: Inventory RHEL 7 ELS IPA servers and clients, exact packages, enabled repositories, roles, replicas, authentication dependencies, owners, backups, and maintenance windows. Confirm the RHEL 7 ELS product and advisory-listed package; do not apply this package identity to unsupported or differently maintained IPA deployments. Install the signed RHSA-2026:93071 packages from the entitled ELS repository and follow Red Hat's service or reboot guidance. Confirm the installed NEVRA on every node, test Kerberos, LDAP, DNS, replication and enrollment, review service health and authentication failures, and retain evidence.
Last verified: 2026-10-31 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | Red Hat Enterprise Linux 7 Extended Life Cycle Support IPA |
|---|---|
| Advisory | RHSA-2026:93071 |
| CVEs | CVE-2026-11861, CVE-2026-13097, CVE-2026-18147, CVE-2026-19550, CVE-2026-73197, CVE-2026-76578 |
| Authoritative release date | 2026-10-30 17:04:26 UTC |
| Authority revision date | 2026-10-30 22:54:33 UTC |
| Affected versions | The advisory-listed IPA package on Red Hat Enterprise Linux Server 7 ELS before the fixed source build. |
| Fixed version | ipa-0:4.6.8-5.el7_9.25.src |
| CVSS base score | 7.5-9.8 (CVSS v3.1; CVE-specific) |
| CVSS severity | High to Critical |
| Exploitation status | Red Hat does not state that these vulnerabilities are being maliciously exploited.; no exploitation claim is inferred. |
What Changed
Red Hat rates this IPA security update Critical and fixes six CVEs with CVSS v3.1 base scores ranging from 7.5 to 9.8.
What To Validate Now
- Inventory. Inventory RHEL 7 ELS IPA servers and clients, exact packages, enabled repositories, roles, replicas, authentication dependencies, owners, backups, and maintenance windows.
- Establish applicability. Confirm the RHEL 7 ELS product and advisory-listed package; do not apply this package identity to unsupported or differently maintained IPA deployments.
- Remediate. Install the signed RHSA-2026:93071 packages from the entitled ELS repository and follow Red Hat's service or reboot guidance.
- Validate. Confirm the installed NEVRA on every node, test Kerberos, LDAP, DNS, replication and enrollment, review service health and authentication failures, and retain evidence.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
RHEL 7 ELS requires the correct entitlement. Coordinate updates across IPA replicas and preserve recoverable configuration and directory backups.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
