[ALSA-2025:17084] Important: ipa security update
Type:
security
Severity:
important
Release date:
2025-10-22
Description:
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 ipa-server-trust-ad-4.12.2-14.el9_6.5.aarch64.rpm 1749e0505674b416be4533ce082b19249e5db696904ec2866d8a3499d1fb16c2
aarch64 ipa-client-epn-4.12.2-14.el9_6.5.aarch64.rpm 2b55e64eefa25409ce77817180847d373b36a3e1a862b9d00f79d4abaa21a38b
aarch64 ipa-server-4.12.2-14.el9_6.5.aarch64.rpm 4611b7ff48d0ced5f166dd7efbed896c8f2ae75bd1a2725f2745ceefd92a7f3b
aarch64 ipa-client-samba-4.12.2-14.el9_6.5.aarch64.rpm 8120e3584cd5daa345368494472751044fc1ed6c148d36474a985d4642eb1ada
aarch64 ipa-client-4.12.2-14.el9_6.5.aarch64.rpm 87989f1fc47325e607a59e709cb981488c2b0f4cc4ad19af216a33fe513d0705
aarch64 ipa-server-encrypted-dns-4.12.2-14.el9_6.5.aarch64.rpm c7068838bf43b184a313da318f3ec9e4a5a872a1f80f18e86ea9b402ce946497
aarch64 ipa-client-encrypted-dns-4.12.2-14.el9_6.5.aarch64.rpm ee3b99933a44f385f1a3251bd625681977bcbc9e4aa3f1db196752df7bea338e
noarch python3-ipaclient-4.12.2-14.el9_6.5.noarch.rpm 4afec2a4ec1fee6ae153d58e0b1d5c9588a3256badbcb617dd16e407de04329d
noarch python3-ipaserver-4.12.2-14.el9_6.5.noarch.rpm 5b39ad672a08c50e968b4955b06ed2964b9e80c96036e5066363e5226eb6be49
noarch ipa-server-common-4.12.2-14.el9_6.5.noarch.rpm 5c58a48f8a41415c6cebc0840e2406d3619fd765f4eba07a23cce17e575d28c1
noarch ipa-selinux-luna-4.12.2-14.el9_6.5.noarch.rpm 606baa5844d826f8b3106cd79fdedcef2c7b91cd0515ff6e286c894ab6306f84
noarch python3-ipalib-4.12.2-14.el9_6.5.noarch.rpm 6d956768cb64c563e64603ccad3adb8bead1a4738780c0f9eb160da8f4a8a7f9
noarch ipa-selinux-nfast-4.12.2-14.el9_6.5.noarch.rpm 79c3d1d875df54c2a6299732351c91176579f9eb90fc2c99e291b8b83a175eb0
noarch ipa-server-dns-4.12.2-14.el9_6.5.noarch.rpm 8e61a839b8627ef3f21b54e422d3338d5f35a5bbd6b6e615957420ebd29e099d
noarch ipa-client-common-4.12.2-14.el9_6.5.noarch.rpm 9473590c63e11c3260d122c56fbc634f7ea33586dcf3cf48153d6049a754f89c
noarch ipa-common-4.12.2-14.el9_6.5.noarch.rpm b1a6eafa2ab6872b4f60368da4f243697aef6b8d880bc3a813c505f399426170
noarch ipa-selinux-4.12.2-14.el9_6.5.noarch.rpm bfb103ee750a8e17294b8333f5d7468297d5cd673ef0c74b7998d349a2d0be94
noarch python3-ipatests-4.12.2-14.el9_6.5.noarch.rpm f11bab0e5d897b89c5f9cda819ac846db881e4a46077033f48563660e1fc9dd3
ppc64le ipa-client-samba-4.12.2-14.el9_6.5.ppc64le.rpm 0611ed63e7a24264d39ddadf737c5117b951d9aa548ce2b4ce66497a003201e7
ppc64le ipa-client-epn-4.12.2-14.el9_6.5.ppc64le.rpm 2ea582f42338ec0c4fc3530709056188396baf22fb7b6f4a54c6c90e52d6dce8
ppc64le ipa-server-trust-ad-4.12.2-14.el9_6.5.ppc64le.rpm 564d431a29343ffc09223bdb30d6740bd002dccc7b481ce0471a35cbfe6fc3e2
ppc64le ipa-server-4.12.2-14.el9_6.5.ppc64le.rpm 5810e6026a3543d5751169cb84a5019e900593a0bd205ccd6f12350b94a08b26
ppc64le ipa-client-encrypted-dns-4.12.2-14.el9_6.5.ppc64le.rpm 68b964274ab80d216f3e4857ce1fbdd931b18d5e2cba5c2118d17091ae530b44
ppc64le ipa-server-encrypted-dns-4.12.2-14.el9_6.5.ppc64le.rpm b671cb43530f990d6d229e522630c70d34c402cc6afe8c1206fed314686e8d0e
ppc64le ipa-client-4.12.2-14.el9_6.5.ppc64le.rpm b697405f77030785c2e738fb2ea1e9b6242103d914962ea4253ac81f61e593c2
s390x ipa-client-epn-4.12.2-14.el9_6.5.s390x.rpm 061dc8939086c1886e21267dd8ecd9aab444e9ab3b12f079f16072e6f44fcca1
s390x ipa-client-samba-4.12.2-14.el9_6.5.s390x.rpm 1480650b91160256d0cc908d957bc05c295926f187e5b59e3940e39358f185f5
s390x ipa-server-4.12.2-14.el9_6.5.s390x.rpm 188af9174cd4c695aa195df4fbb737f381aa208c7454c7591ef18f957d22ea45
s390x ipa-server-encrypted-dns-4.12.2-14.el9_6.5.s390x.rpm 1f72dd3c6edcd8288c0c8d38159a9fb992a84a93911ecd8ba77d804da283e849
s390x ipa-server-trust-ad-4.12.2-14.el9_6.5.s390x.rpm 2b2f88899fcd5b2c5664d1b6be688269db7094e128f5497aeb2ee11317f13a3f
s390x ipa-client-encrypted-dns-4.12.2-14.el9_6.5.s390x.rpm 9459dc885d7622fc2724c657b46bd59789c3bd342db068e0a49ef69b237f5030
s390x ipa-client-4.12.2-14.el9_6.5.s390x.rpm e8c4a811e1b4665fc070c999b47c44038071926dd6d86a29d961d6500305db44
x86_64 ipa-server-4.12.2-14.el9_6.5.x86_64.rpm 009f6de164f8bd3f2be870d8f33f316b11320ad59c7f5a691910e194853addba
x86_64 ipa-server-encrypted-dns-4.12.2-14.el9_6.5.x86_64.rpm 5728e4e95710ef6004baccfd04d2b34dca0b8abd42e69ff79f3cc8b1545926fc
x86_64 ipa-server-trust-ad-4.12.2-14.el9_6.5.x86_64.rpm 600e3bcdfd54d21e0b61f558c1b8d732067deaf7f39cbd01bd0ea03c54a83352
x86_64 ipa-client-epn-4.12.2-14.el9_6.5.x86_64.rpm a4217a50d6d7b1f36836d3fcdc4209b7807fc71e01b5cd30d9a9ffc74789c7e9
x86_64 ipa-client-encrypted-dns-4.12.2-14.el9_6.5.x86_64.rpm afe666a461c48127e57f485d94ab6ab4a1a5c9badab85ba4b5f6cb29548551b4
x86_64 ipa-client-4.12.2-14.el9_6.5.x86_64.rpm d9dd1d3096c2a249194f498c0105879a48a3c1e773539466d143f44c169ddc48
x86_64 ipa-client-samba-4.12.2-14.el9_6.5.x86_64.rpm f155532b0878018c097efe984dd6bbca9e12dd026586c78c8f0cab7288959b71
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.