[ALSA-2025:9190] Important: ipa security update
Type:
security
Severity:
important
Release date:
2025-07-28
Description:
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 ipa-client-4.12.2-15.el10_0.1.aarch64.rpm 17afeecabbdad28991f4b960d0e7f6dbf0d72aebbff0645ca8689cc506c51c6c
aarch64 ipa-client-samba-4.12.2-15.el10_0.1.aarch64.rpm 3c8196136afde5c5a094cb99649030c3fd894cc8e34076b0d6cfddf36a431961
aarch64 ipa-server-4.12.2-15.el10_0.1.aarch64.rpm 4ef6eefaa20892ca3573dc8deb7aa198f9ad38434964265c15539b1d1bb69c95
aarch64 ipa-server-trust-ad-4.12.2-15.el10_0.1.aarch64.rpm d3c58796d7d4e0afed647f722dfddab179e48bc1e58998923246b1f94d8bc88f
aarch64 ipa-client-encrypted-dns-4.12.2-15.el10_0.1.aarch64.rpm eaea13c6b2a02055c293051ca4a4134147a3a9ef06999c976baf7349fbbc6a56
aarch64 ipa-client-epn-4.12.2-15.el10_0.1.aarch64.rpm efe7603622bb5c295bbab3b532aa06daa3a7a37d844661ec71bb19e0091b984c
aarch64 ipa-server-encrypted-dns-4.12.2-15.el10_0.1.aarch64.rpm f1176a5dfd8157731007e1c4498b1854983f70c73f53b212b5d41fb67e44188e
noarch ipa-selinux-4.12.2-15.el10_0.1.noarch.rpm 1d920b6eb90547a26ceb2e93717ff49565acb2cd59195f5ab383f78da02f317c
noarch ipa-common-4.12.2-15.el10_0.1.noarch.rpm 22f8c6bef8a065f1f5760933dda34f9edf851f0660a926e16f26f828396ce510
noarch ipa-client-common-4.12.2-15.el10_0.1.noarch.rpm 8fc3a971c000d420f59c1e178d9ec1ed49fe813fa261a62664131a7700eb708f
noarch ipa-selinux-luna-4.12.2-15.el10_0.1.noarch.rpm 9ceefd1921ad06cefb32677e58b59d0df6b608cf85e168919b1875a8113a18a8
noarch python3-ipaserver-4.12.2-15.el10_0.1.noarch.rpm a4388950feacfdcd8576e3013104063df956260b000a58820007651ec47be40e
noarch python3-ipatests-4.12.2-15.el10_0.1.noarch.rpm b7323e19b3f2ed06345cdd723a2207ded4a0ce6665a7a456597c962fc5c5661b
noarch ipa-server-common-4.12.2-15.el10_0.1.noarch.rpm bae4fbd69e26956c5d5969abae1a567c7249bbaf23694523ae9057f309b70824
noarch ipa-server-dns-4.12.2-15.el10_0.1.noarch.rpm d68011bee38b709e41d48a107623fda8be01268f56aa750112f6ef811113cf08
noarch python3-ipalib-4.12.2-15.el10_0.1.noarch.rpm dc8fc068fb753fb8238745c8a3ff902a51d96c5729162efd78b12f850e5be474
noarch ipa-selinux-nfast-4.12.2-15.el10_0.1.noarch.rpm dd04bbf38ef0a3f2ae8b5b72ac6bc90265d58c54792c0533cbc550afc392a9f0
noarch python3-ipaclient-4.12.2-15.el10_0.1.noarch.rpm dd8a1f50c402fa33d0822345a594508b293266bd1862e875877daabdbf6fc20a
ppc64le ipa-client-epn-4.12.2-15.el10_0.1.ppc64le.rpm 19e5e816f93d3ad45c625f2ba7891b6c741dcce3b3a0701a4ac8dea85729e21f
ppc64le ipa-server-4.12.2-15.el10_0.1.ppc64le.rpm 4b2cce040bc982f88f803d4397bc73fa94192d04015611ab4942f2858e2880a7
ppc64le ipa-server-trust-ad-4.12.2-15.el10_0.1.ppc64le.rpm 69d94468062c37aef1fecf8b11aa3b0c81a20714ca7788f1c0c921e58ae3026f
ppc64le ipa-client-encrypted-dns-4.12.2-15.el10_0.1.ppc64le.rpm 6bbd2fe16f3b889eeea70d8a30d5d1aa59edf6cdf356523a3bd41450c611d065
ppc64le ipa-server-encrypted-dns-4.12.2-15.el10_0.1.ppc64le.rpm a4a347ed59caf72803f5c361c56407bc3d37045518696fafc308e3a49de05507
ppc64le ipa-client-samba-4.12.2-15.el10_0.1.ppc64le.rpm aafe55179a56d61485fa8a0680eec685294580f48d8ba4cda91b1305bcddf12f
ppc64le ipa-client-4.12.2-15.el10_0.1.ppc64le.rpm bb9e2fdfb036693d11e04939417b9641c3d13ab9164284460a9c9ce9b072f43a
s390x ipa-server-4.12.2-15.el10_0.1.s390x.rpm 0dceb5389cfe0c4268dd34469a2d3e73ebd52a8e04936d8b0f1146b7534d992a
s390x ipa-client-epn-4.12.2-15.el10_0.1.s390x.rpm 42b8e94a1b6d351d9b83e5b52857427d469e4b4aa87ca44232da1e613277737d
s390x ipa-server-trust-ad-4.12.2-15.el10_0.1.s390x.rpm 4c7d5dd990d6c228fee9aea163b33ccfb7f2890ecab61d0db2de3a7d8f2d00f9
s390x ipa-server-encrypted-dns-4.12.2-15.el10_0.1.s390x.rpm 63278cea66bc7adf1d225590ab44dcf54289054391a2dbc7363997684f723c32
s390x ipa-client-4.12.2-15.el10_0.1.s390x.rpm 6a00cc32d393e2b130c76790adb666916c466718b56e285b8bca95dc9980613f
s390x ipa-client-samba-4.12.2-15.el10_0.1.s390x.rpm 75c120cbce342e1db338ceae4ed5c6db99a7af7491672d50da2f57c1247bdcb0
s390x ipa-client-encrypted-dns-4.12.2-15.el10_0.1.s390x.rpm 88569b907e9c9cd0a6e8da2ef27c33bdfbdb1e11af2bd9c417abe339ae860b53
x86_64 ipa-server-trust-ad-4.12.2-15.el10_0.1.x86_64.rpm 3f9944e35258f023a5dde1f6322c3b764971da7fb3919fc1f01f0170a8d325e5
x86_64 ipa-server-4.12.2-15.el10_0.1.x86_64.rpm 79209ec5031d95a9841781f01f3f1a9e30e72992289577e3d1299cbb6e608dfb
x86_64 ipa-server-encrypted-dns-4.12.2-15.el10_0.1.x86_64.rpm b06a59e2125f963475273556d2fe58c57e237798808c3313dca1672f1a576bf7
x86_64 ipa-client-4.12.2-15.el10_0.1.x86_64.rpm dfc827f106881bf51e18cc5d75f421f8f9e9e46d0f4f1ddb6af8812d9fe74658
x86_64 ipa-client-encrypted-dns-4.12.2-15.el10_0.1.x86_64.rpm eef107ba328278585de188e1e304ac3784a79c44e4ebe98ab4c97af7fe3df49f
x86_64 ipa-client-samba-4.12.2-15.el10_0.1.x86_64.rpm f45a41b9f9d9d9bf1ba56af83c42d8910c38fc9a0f2dbd1ebf0d88ad74f66d04
x86_64 ipa-client-epn-4.12.2-15.el10_0.1.x86_64.rpm f9e29b2c5a17d062307661d579a2c95db34f9546ffefe7e132f08ea74b8041a4
x86_64_v2 ipa-client-epn-4.12.2-15.el10_0.1.x86_64_v2.rpm 300edb1b6009e7f36cefd215917f8665fcdfc393b51e3f24e80f6b3b068df762
x86_64_v2 ipa-client-4.12.2-15.el10_0.1.x86_64_v2.rpm 58ccfa9a438e5417d9dab4d207472d06ac6dc9c89bea094806233319374923b0
x86_64_v2 ipa-client-samba-4.12.2-15.el10_0.1.x86_64_v2.rpm 78a437d9aa133591bbd34e5bca34a691fc9832e54ce5f4b93971fceb1765fd9d
x86_64_v2 ipa-client-encrypted-dns-4.12.2-15.el10_0.1.x86_64_v2.rpm 7dc195468c79ee16ef748303d1b52274443778394105cf8e4f16dfa65d9fd5dc
x86_64_v2 ipa-server-trust-ad-4.12.2-15.el10_0.1.x86_64_v2.rpm 85c88a18ce449cec2282d0d6b49a01757ba15031667b84bfc65c089b70a9dc60
x86_64_v2 ipa-server-4.12.2-15.el10_0.1.x86_64_v2.rpm b577601ad9a9d5634f76a47fab506d8075fec5a47e02edb14282443f93b1c5f3
x86_64_v2 ipa-server-encrypted-dns-4.12.2-15.el10_0.1.x86_64_v2.rpm e687bd5861dbb0db290e5016b023d02a48ff47262cb36082bb8f0df7bc7d10da
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.