Bug 2491282 - CVE-2026-12804 lemonldap-ng: Lemonldap-NG: Open Redirect via URL manipulation in SAML Common Domain Cookie Endpoint [epel-all]
Summary: CVE-2026-12804 lemonldap-ng: Lemonldap-NG: Open Redirect via URL manipulation...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: lemonldap-ng
Version: epel10
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Xavier Bachelot
QA Contact:
URL:
Whiteboard: {"flaws": ["4654e897-4378-4615-85c4-2...
Depends On:
Blocks: CVE-2026-12804
TreeView+ depends on / blocked
 
Reported: 2026-06-22 06:53 UTC by Srikanth Balasubramanian
Modified: 2026-08-02 01:14 UTC (History)
1 user (show)

Fixed In Version: lemonldap-ng-2.23.2-1.el10_3 lemonldap-ng-2.23.2-1.el8 lemonldap-ng-2.23.2-1.el10_2 lemonldap-ng-2.23.2-1.fc44 lemonldap-ng-2.23.2-1.el9 lemonldap-ng-2.23.2-1.fc43
Clone Of:
Environment:
Last Closed: 2026-08-02 00:25:29 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Srikanth Balasubramanian 2026-06-22 06:53:25 UTC
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Comment 1 Fedora Update System 2026-07-23 18:25:11 UTC
FEDORA-EPEL-2026-389e3eacf9 (lemonldap-ng-2.23.1-1.el9) has been submitted as an update to Fedora EPEL 9.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-389e3eacf9

Comment 2 Fedora Update System 2026-07-23 18:25:12 UTC
FEDORA-EPEL-2026-2e299f2119 (lemonldap-ng-2.23.1-1.el10_2) has been submitted as an update to Fedora EPEL 10.2.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-2e299f2119

Comment 3 Fedora Update System 2026-07-23 18:25:13 UTC
FEDORA-2026-868c85ffc6 (lemonldap-ng-2.23.1-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-868c85ffc6

Comment 4 Fedora Update System 2026-07-23 18:25:13 UTC
FEDORA-2026-280b932f03 (lemonldap-ng-2.23.1-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-280b932f03

Comment 5 Fedora Update System 2026-07-24 00:38:47 UTC
FEDORA-EPEL-2026-389e3eacf9 has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-389e3eacf9

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2026-07-24 00:48:52 UTC
FEDORA-EPEL-2026-4131da0d34 has been pushed to the Fedora EPEL 10.3 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-4131da0d34

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2026-07-24 01:06:50 UTC
FEDORA-EPEL-2026-c8d3a564da has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c8d3a564da

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2026-07-24 01:23:50 UTC
FEDORA-EPEL-2026-2e299f2119 has been pushed to the Fedora EPEL 10.2 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-2e299f2119

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2026-07-24 01:29:54 UTC
FEDORA-2026-280b932f03 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-280b932f03`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-280b932f03

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Fedora Update System 2026-07-24 01:52:17 UTC
FEDORA-2026-868c85ffc6 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-868c85ffc6`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-868c85ffc6

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 11 Fedora Update System 2026-07-25 01:00:54 UTC
FEDORA-EPEL-2026-2b6d93d33e has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-2b6d93d33e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 12 Fedora Update System 2026-07-25 01:02:42 UTC
FEDORA-EPEL-2026-90e0730cd0 has been pushed to the Fedora EPEL 10.3 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-90e0730cd0

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 13 Fedora Update System 2026-07-25 01:08:45 UTC
FEDORA-EPEL-2026-b4ac826adf has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b4ac826adf

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 14 Fedora Update System 2026-07-25 01:27:44 UTC
FEDORA-EPEL-2026-5ddeb916d3 has been pushed to the Fedora EPEL 10.2 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-5ddeb916d3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 15 Fedora Update System 2026-07-25 01:37:00 UTC
FEDORA-2026-f9b48b47af has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-f9b48b47af`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-f9b48b47af

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 16 Fedora Update System 2026-07-25 01:56:31 UTC
FEDORA-2026-1f595e8eb4 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-1f595e8eb4`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-1f595e8eb4

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 17 Fedora Update System 2026-08-02 00:25:29 UTC
FEDORA-EPEL-2026-90e0730cd0 (lemonldap-ng-2.23.2-1.el10_3) has been pushed to the Fedora EPEL 10.3 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 18 Fedora Update System 2026-08-02 00:34:29 UTC
FEDORA-EPEL-2026-b4ac826adf (lemonldap-ng-2.23.2-1.el8) has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 19 Fedora Update System 2026-08-02 00:46:38 UTC
FEDORA-EPEL-2026-5ddeb916d3 (lemonldap-ng-2.23.2-1.el10_2) has been pushed to the Fedora EPEL 10.2 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 20 Fedora Update System 2026-08-02 00:54:15 UTC
FEDORA-2026-f9b48b47af (lemonldap-ng-2.23.2-1.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 21 Fedora Update System 2026-08-02 00:59:52 UTC
FEDORA-EPEL-2026-2b6d93d33e (lemonldap-ng-2.23.2-1.el9) has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 22 Fedora Update System 2026-08-02 01:14:45 UTC
FEDORA-2026-1f595e8eb4 (lemonldap-ng-2.23.2-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.