[ALSA-2025:20994] Important: ipa security update
Type:
security
Severity:
important
Release date:
2025-12-05
Description:
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 ipa-client-4.12.2-24.el10_1.1.aarch64.rpm 0d4049f24a2de643f5ecdb270d5a3e0db1db62b2b8d5a537edceeb17f336482a
aarch64 ipa-client-samba-4.12.2-24.el10_1.1.aarch64.rpm 3f171f34ee11653b1ec5ee703102482393593f6ffc0d7108e7f13c4e82a9fe23
aarch64 ipa-client-epn-4.12.2-24.el10_1.1.aarch64.rpm 96dd48551e7535c54693f5714122fe9594bbf1cd270f58084875536d6dffe80d
aarch64 ipa-server-trust-ad-4.12.2-24.el10_1.1.aarch64.rpm b3f89a3bc9d0ebd58a3f2e8dddf6a37e7b4a911395794c18c86a70b2f879402e
aarch64 ipa-client-encrypted-dns-4.12.2-24.el10_1.1.aarch64.rpm e411306395b97828fd503d437086c645644a9afc4d55930da4372956221ffd57
aarch64 ipa-server-encrypted-dns-4.12.2-24.el10_1.1.aarch64.rpm fad3122af0f465e5a71890bfed4e874cd27143602be18eeff38de31e23cccb7d
aarch64 ipa-server-4.12.2-24.el10_1.1.aarch64.rpm fe50204d2bc794e4883dc924253a9b71f423245f41a2ed94b9f1bcb832d9aac2
noarch python3-ipaclient-4.12.2-24.el10_1.1.noarch.rpm 1e28ee28b917d0ed61bbb988255ead240484132e868554759101aa0d565cdf57
noarch ipa-client-common-4.12.2-24.el10_1.1.noarch.rpm 376fa77e7e52639583dfac92fcbf84f96bca35d883cd97d2752fa18c555d9c64
noarch python3-ipatests-4.12.2-24.el10_1.1.noarch.rpm 3e3662f048ff47584d06f1f56b5ec7d326b91747469a6343ade29d870ef96426
noarch ipa-selinux-nfast-4.12.2-24.el10_1.1.noarch.rpm 56185a3d8b003718879be77f9c83ef6054e8c4760d036b80b70a295e2ac3536b
noarch ipa-server-common-4.12.2-24.el10_1.1.noarch.rpm 59dd95cde9c15e5af243ed6bee91ddc5e15945cc14b3fb9826452a6d0cb26d3e
noarch ipa-server-dns-4.12.2-24.el10_1.1.noarch.rpm 70828fc2c81a8aefa2701e3a9087ab82ec8c754bc9854ec41691e24c96bc6cff
noarch ipa-selinux-luna-4.12.2-24.el10_1.1.noarch.rpm 7897ed959fa71f31826c7454dd7cc21f8489196358eb8bccdf372ea3a3fa2c29
noarch python3-ipaserver-4.12.2-24.el10_1.1.noarch.rpm 9f86bf32f3eb2276cbbdeedf501d93dda0a17bc6d330c0b26a285a96622bcce1
noarch ipa-selinux-4.12.2-24.el10_1.1.noarch.rpm a2aaff0c358250a9c92f250523e8685e21a2082bc74283bea6d9d9272bc2d295
noarch ipa-common-4.12.2-24.el10_1.1.noarch.rpm e065fac6be188f69a86ce3909bbab62ccfba4f634df2446292b89b03c609666e
noarch python3-ipalib-4.12.2-24.el10_1.1.noarch.rpm f13cc6675a7f285a61a8f25ef13cd08cd898f3262e692ea1f27de78c9f95de71
ppc64le ipa-client-samba-4.12.2-24.el10_1.1.ppc64le.rpm 35d9317aea8aa2539bc01fd610b2f46bfe141ac00c0039b3f495bf067fa7f78d
ppc64le ipa-server-encrypted-dns-4.12.2-24.el10_1.1.ppc64le.rpm 44798cd4428d5b60331f11036c49c078fd59c1e4084a018a0665e2feaf205bfd
ppc64le ipa-client-encrypted-dns-4.12.2-24.el10_1.1.ppc64le.rpm 463d57dbabe9c859197ede00e8570c74575e5632eae3861fc8e2a5480330ef3f
ppc64le ipa-server-trust-ad-4.12.2-24.el10_1.1.ppc64le.rpm 4b920e55be541fda49374ec8f9c0066bb5ebd2fe7d1425f0e54b0cb2d6eca5d9
ppc64le ipa-client-4.12.2-24.el10_1.1.ppc64le.rpm 71b67523735a15fcc44168255de6ba8102b15345231b2e21b55e42096fb53f18
ppc64le ipa-server-4.12.2-24.el10_1.1.ppc64le.rpm b238095b53fb382dc3528d6651a7ef28272254e11416a8e50f1983d0a39dcb15
ppc64le ipa-client-epn-4.12.2-24.el10_1.1.ppc64le.rpm cfc84076fb40c519c2aa867bf8d5489cc2a56e27f715ddb1386f691ca3ccbce4
s390x ipa-client-encrypted-dns-4.12.2-24.el10_1.1.s390x.rpm 2859c9bdd288bcb9f3abb007b5e6f7fe89cf5ae730bfa8839cf2ee5bff358bcf
s390x ipa-client-samba-4.12.2-24.el10_1.1.s390x.rpm 28f7e43e254f37483af1170538ef878069dae89c91f4ce8c6386bfc1c0ad27fd
s390x ipa-server-trust-ad-4.12.2-24.el10_1.1.s390x.rpm 6d84735fdb4919bd8b3ed9e8559ebf14d3fa88ea8acae408f9cc212e8d11d70c
s390x ipa-client-epn-4.12.2-24.el10_1.1.s390x.rpm 6f3ac5bf52490f694eab18cd4e1e2abc2fa767c364c584ea7aedc06f2c43bb97
s390x ipa-server-encrypted-dns-4.12.2-24.el10_1.1.s390x.rpm 94580cb8e92e9e807a0db8b810bf03f5f94aadd27eef0f9864b4780154066a26
s390x ipa-client-4.12.2-24.el10_1.1.s390x.rpm 94de68f4c9a3b5160ddfa57fa06d1bdcf59007b144b5f7c2c7b32182c0e1c1bc
s390x ipa-server-4.12.2-24.el10_1.1.s390x.rpm b34b4d04e3cfad3c2c6c1d7fad53631874cd7bf2a0be18d4c3edd251af788ad2
x86_64 ipa-client-samba-4.12.2-24.el10_1.1.x86_64.rpm 287360da3f5b95afdafaae38943527923eac965a370e2e83139b2c9e69517a3a
x86_64 ipa-server-4.12.2-24.el10_1.1.x86_64.rpm 5dfac5701bb29b18a93231b4bad1505daf69a659e9ec508c577c52073eaa9fe9
x86_64 ipa-server-trust-ad-4.12.2-24.el10_1.1.x86_64.rpm 7b5f4de51e6cb6b29b0108d293b654305a715eaf56124ac0753d9fb49ac07202
x86_64 ipa-client-encrypted-dns-4.12.2-24.el10_1.1.x86_64.rpm 7b708e982983e8a586378e22ed6b0a5dd8c0ad736f3a8aae90038ef7e5dd8406
x86_64 ipa-server-encrypted-dns-4.12.2-24.el10_1.1.x86_64.rpm 80866b189ecc38084632dc70b258e2e6ad273a51fa4a463343e5a265f8f7640c
x86_64 ipa-client-4.12.2-24.el10_1.1.x86_64.rpm c34323cede89117b2f204fcf1724ea100fada84d02b9320d78f2d2b6a73a973e
x86_64 ipa-client-epn-4.12.2-24.el10_1.1.x86_64.rpm f26414b5a55cedb8d2e01d30f3cfc677201233b21c823321378d8e2cdc99c52e
x86_64_v2 ipa-server-trust-ad-4.12.2-24.el10_1.1.x86_64_v2.rpm 2c4b1c461820dd3efeab473b1a07a19f448eea663a8c57510a83519f708f1c26
x86_64_v2 ipa-client-epn-4.12.2-24.el10_1.1.x86_64_v2.rpm 3d392257025239a2c750f8e9909266ea25bc73d2bbf3400879bee80173451cba
x86_64_v2 ipa-server-encrypted-dns-4.12.2-24.el10_1.1.x86_64_v2.rpm 82fd49dbe105a593f5120a8381bc7c168c4e4b71ef0d222d6d39b131a2da9e1e
x86_64_v2 ipa-client-4.12.2-24.el10_1.1.x86_64_v2.rpm 8a1bf5b90213f8543c8dd46c20c3017d778e98c2db387814921440bf92230e2c
x86_64_v2 ipa-client-samba-4.12.2-24.el10_1.1.x86_64_v2.rpm cd8c0c57d0f2088b0c61acd5ab6b3acdd837eefbcde8724fafe8aa4d696939c9
x86_64_v2 ipa-client-encrypted-dns-4.12.2-24.el10_1.1.x86_64_v2.rpm e9298488405a4612ff4150c733b32e82a5a7e64cddfe3f84c9e0af688d3ba064
x86_64_v2 ipa-server-4.12.2-24.el10_1.1.x86_64_v2.rpm f42327f9e403bc4f41109d6ef113af04eff59691185ac25bb7132d2e5cd2ecb2
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.