[ALSA-2025:9188] Important: idm:DL1 security update
Type:
security
Severity:
important
Release date:
2025-06-30
Description:
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 ipa-client-epn-4.9.13-18.module_el8.10.0+4018+32aeeb28.aarch64.rpm 09e99ae945496f1cc6db0de3af042f23e6449d25e2117de53d4bcbed4328fe9b
aarch64 ipa-client-4.9.13-18.module_el8.10.0+4018+32aeeb28.aarch64.rpm 33f1c709ce749b20bfaf12502b138228a7478109cc27ce343572a317cde82d44
aarch64 softhsm-devel-2.6.0-5.module_el8.6.0+2881+2f24dc92.aarch64.rpm 41ccba15598559f2c4ce3d45740d258ac1e4d0de8640d2654774997e3b67e0c5
aarch64 ipa-server-trust-ad-4.9.13-18.module_el8.10.0+4018+32aeeb28.aarch64.rpm 70fa914708ddcb07903b4ec5cb2133ab0ccf2730a8c63206a7d44108843ead36
aarch64 opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.aarch64.rpm 7a6b126e78c5f05e44b87315375c826dd2cebff2799860e87d1eceb85304458a
aarch64 ipa-server-4.9.13-18.module_el8.10.0+4018+32aeeb28.aarch64.rpm 9e4bee2ab19285aa695c1d39521c1e450c15cd7aaae59b8fcf6bbe1bb44ef05d
aarch64 softhsm-2.6.0-5.module_el8.6.0+2881+2f24dc92.aarch64.rpm a197e40c5401d2d7385eae40692efb1bf5ff59045f9cf9b24373732010966126
aarch64 bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.aarch64.rpm aafd855145033ee07a7a867199ad1e03176e2b89afd38b2802ca0390a204aba0
aarch64 slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.aarch64.rpm c9254b81dc1f04fad69e0bfa87873c8f74e21da97fd5bc8d30e7e7073d496092
aarch64 ipa-client-samba-4.9.13-18.module_el8.10.0+4018+32aeeb28.aarch64.rpm d4a9db23b20cc48a7de36cc66fec9e279290049a8c6b6b224c0a51baf478028b
noarch python3-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm 109f98be9cf4358f1892e43363dc3d1163173bd6f1f58365f9fc153b2fbad8d7
noarch ipa-client-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 21f5d24308136198aa718208dc9f79e92e6d2dfc7b10bd1b49493e919d73fc38
noarch python3-ipatests-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 303ddbf7b9150cfac4510632323b565f2759baa8cf86576d93a050e8e18f86a1
noarch python3-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.noarch.rpm 3827ec1b1ddb7641307d2aae1a6e9d8a9634a2f4e2f2ee7e8ba866903524734b
noarch ipa-server-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 3ba505bc9d78830978408b7025512d8fdb2834042c2cba7ff735db1d22f04d5d
noarch python3-custodia-0.6.0-3.module_el8.6.0+2881+2f24dc92.noarch.rpm 416415f024d2f5fd5573a04b9b3d4c4717e07b8f72999773e10bf94d076a7296
noarch python3-kdcproxy-0.4-5.module_el8.10.0+3942+63b39a46.1.noarch.rpm 4ea4f303ee75781e5ebb0d16728e9fbd5f1fc4cdc4e34dca4ac19c4a3b350925
noarch ipa-healthcheck-0.12-5.module_el8.10.0+3980+d78e8e90.noarch.rpm 56b8766fd06a41900a4bc86ecc305d35eed3657241b7fe9e1760aa64c0eaa21c
noarch python3-pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm 5f45866e2459f1c9a0b969263baab4ffed264d2998456658cafd554de6300cfa
noarch python3-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm 68b28b3fb94f5026730feca1a1c3feb64c06ad5601a7cf8befb4e704510edd73
noarch python3-qrcode-core-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm 7a7706a06f589393224f10f99b9aef62d5559f02e1c97754b86d2763dfefa70d
noarch ipa-python-compat-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 84496c57b7f6a92c80c690d5efd007a610f57dbb4476aae28fd47d40552f90ae
noarch python3-ipaclient-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 8bbdb06d51b61ca2a5843662628c8e9f65ed0d253f547d333ef8e3dc31750a8c
noarch python3-ipalib-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 91440eec3438e89daf484d37914e038e0d6bd83fe0e3137821797719dea4007b
noarch ipa-selinux-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm 989211ad9db4fef6227579c2f88475d245a8ce09d341d6ef670c90d188b1b38e
noarch ipa-server-dns-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm accd6092b597737762e6936c1eab6467a2752e5dde51ba8f9a23aa2461be804e
noarch python3-ipaserver-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm be5881ad817c676c938ae1976012411bf3ff0606f4cb4ecd4a8da85854f143a9
noarch custodia-0.6.0-3.module_el8.6.0+2881+2f24dc92.noarch.rpm c2ce1591d7ce3710fbdf3aa666fc69e9d06a3e691f36228836771cc64886b772
noarch ipa-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm cb3caac3a325a801ad6e25861c52bb2cabf8656bf531706b6b0fe6c63ca2c76d
noarch ipa-healthcheck-core-0.12-5.module_el8.10.0+3980+d78e8e90.noarch.rpm e4456c627a761ce2f486f804962f8897844db02de278a63d6bdb686ea93efdca
ppc64le softhsm-devel-2.6.0-5.module_el8.6.0+2881+2f24dc92.ppc64le.rpm 0d565eba7dc881927d07fa580d8bc05ad7a4a8cc82217ef7d98c5f466d7195a1
ppc64le ipa-server-trust-ad-4.9.13-18.module_el8.10.0+4018+32aeeb28.ppc64le.rpm 293bdd38b989325f8439c6d8772d07897389196098c412b3fe61271a35d9f0ba
ppc64le slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.ppc64le.rpm 327532fa7a0a9722c3f491aa9ff783fb19718ba7b392b5cc2451f13a3a36629d
ppc64le bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.ppc64le.rpm 32f71db345ad560a66d54f2f2d134909129a85a43c76b080b22379d5f22c10ee
ppc64le softhsm-2.6.0-5.module_el8.6.0+2881+2f24dc92.ppc64le.rpm 9e7906c48f5b221582d8e4a3ab0400317bacccf5f83827b295c73cc6e75a3dac
ppc64le ipa-client-4.9.13-18.module_el8.10.0+4018+32aeeb28.ppc64le.rpm 9fdebe3e0bea3a76559da221417a7b51e5a4196747f6acc463b130e3b2e8e6cb
ppc64le opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.ppc64le.rpm d26d57cb78cf864120b176a60b8aac77f46e7c65ac62e135ee2368156426f096
ppc64le ipa-client-samba-4.9.13-18.module_el8.10.0+4018+32aeeb28.ppc64le.rpm da62f78a6ce174e8c72e3a1e3fdf093fde8e13bc9f4bef3c74ad3c51259c5619
ppc64le ipa-client-epn-4.9.13-18.module_el8.10.0+4018+32aeeb28.ppc64le.rpm f0d4a25941fee35c0e34be71c24a172625d0b6a924ac6ffec8cb3d9c1bccc6ae
ppc64le ipa-server-4.9.13-18.module_el8.10.0+4018+32aeeb28.ppc64le.rpm f600c4b6f4b5d4dad997a164406325d9b331f329edbc2231df25bf00d1d9d7b0
s390x ipa-client-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm 1e1e0c08ce341b59f0fd2a64694bc7c74b1bdfb01e0cf5955db34fa10c8728fe
s390x ipa-server-trust-ad-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm 28b0b9481dbc0fde6a45a4bfbc07a1e63138dce9f237535ed7b515a266d43fe1
s390x bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.s390x.rpm 2c700ccfc92d7dea4c2bd2b386a200dbe70a6d9e88144470c331345f4694c1b3
s390x ipa-client-samba-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm 94896db6e152d8c123c0141e65446d01f743d23f56d51cf06e7e19b5f56069e9
s390x softhsm-devel-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm 99b0ac3696d5de6fbbd0e2bb5882b9a36feef44b0fcb4f42dd82963f3077f8ab
s390x ipa-server-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm a588040cbbd902cbff713ef4c287e6afba031c999ee61e40cd8321d77c281c6e
s390x softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm ad706f5e338373e1c6880dce46ce69f7e82ebf416e464ec0abc5c316b27306a1
s390x slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.s390x.rpm bfc1ed725a4b9c6d74b4b99b8b4dd82647f4f1a4e958e8e455cb5762aae70113
s390x opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.s390x.rpm d54df6918ca5a7264f2793ef6d6b2a42884458f030404ce47a19cb6abbfdb9cf
s390x ipa-client-epn-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm dd395e323f9eeeda52cf191d102204e957a620d49672559cc673e0f7fc62cb78
x86_64 ipa-server-trust-ad-4.9.13-18.module_el8.10.0+4018+32aeeb28.x86_64.rpm 151d2e276492b4bf66b133e73e018020586b739861c8d4d16281c291ced111e4
x86_64 bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.x86_64.rpm 270531af28eff35f4329f317ed1c1614a1af7af89de516daa80dc5ffdd0bf547
x86_64 slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.x86_64.rpm 2f1baf70e48ecb4049b6c17d28d695c43ffd4cb2e67cd490266c669b7d181304
x86_64 ipa-server-4.9.13-18.module_el8.10.0+4018+32aeeb28.x86_64.rpm 5705992b469b09aaa894621097f55eb9af9d652e312b8bf24e2ff7c66dae63ca
x86_64 softhsm-2.6.0-5.module_el8.6.0+2881+2f24dc92.x86_64.rpm 811210ae191e3e43bd6c050dc62929aa8ceffa91282ea200b96845b8a1425de2
x86_64 ipa-client-epn-4.9.13-18.module_el8.10.0+4018+32aeeb28.x86_64.rpm 9defa86070af976fdcb533441709e42e2cadbc5244642c275a148b0180cee924
x86_64 ipa-client-4.9.13-18.module_el8.10.0+4018+32aeeb28.x86_64.rpm b05b63ca8770bc33e03d50f3977afed78a88e73d4b6a217048d5255b5fcd477c
x86_64 ipa-client-samba-4.9.13-18.module_el8.10.0+4018+32aeeb28.x86_64.rpm bcc709a53364dc55e4be4d55cd83a701e175ecfafab34aefbadb96d207fad964
x86_64 opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.x86_64.rpm bce5ab591c19f77a9834eee97389c4523d782e50fb58102000d7ae17cb49e77f
x86_64 softhsm-devel-2.6.0-5.module_el8.6.0+2881+2f24dc92.x86_64.rpm f004bec0bb3248d09ad4724c0c8acfc9cc5466028bcd72bb63d52490efb4bfe8
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.