[ALSA-2025:20928] Important: ipa security update
Type:
security
Severity:
important
Release date:
2025-12-01
Description:
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 ipa-client-4.12.2-22.el9_7.1.aarch64.rpm 2beca452d28d18f0d20b542ea5383477866e1ca67b636ea397b79e055a170e88
aarch64 ipa-client-encrypted-dns-4.12.2-22.el9_7.1.aarch64.rpm 9e710f011843e0a59d5662366db86c3f8ce5984bb756138dde972e3289486bdb
aarch64 ipa-client-samba-4.12.2-22.el9_7.1.aarch64.rpm ae98040c973351f6094a6dd959778ac3f23c07c22161e7e127aace127c594723
aarch64 ipa-client-epn-4.12.2-22.el9_7.1.aarch64.rpm afe4c9f91584d3bdb858ffbe742f1c7e375863ff4870459260944340fd33dade
aarch64 ipa-server-trust-ad-4.12.2-22.el9_7.1.aarch64.rpm cfa79f802e874234389e07bb284847cac9671e8fd06d8054923679d9491f482f
aarch64 ipa-server-4.12.2-22.el9_7.1.aarch64.rpm d45dbe8f251db40642bc5f65cd78e09ec978e8abbf36357e5d37fb805f6a3e95
aarch64 ipa-server-encrypted-dns-4.12.2-22.el9_7.1.aarch64.rpm fb25d9ef429dce14d6add7fc1be4ac5a38837f75b5da247c2874829b6f45099b
noarch python3-ipaclient-4.12.2-22.el9_7.1.noarch.rpm 023ac0818f6d060a70c77956bd8ac835311b393eef88c8400b43d48a9d3e4d94
noarch ipa-common-4.12.2-22.el9_7.1.noarch.rpm 09fee2c19da96fd3e2097f8d6f43f34ff093a9427d7b4693c1cad539920b82d3
noarch ipa-server-dns-4.12.2-22.el9_7.1.noarch.rpm 34b4aad3b8138a4f5014ff60709ef7627eca3ac2b0b42e86df6c0b94431e574c
noarch ipa-selinux-luna-4.12.2-22.el9_7.1.noarch.rpm 3df260b9ce022fdaee1ddd9c42ea1feb17463f75e4b2afbf9cc455c8c9b4daf9
noarch python3-ipalib-4.12.2-22.el9_7.1.noarch.rpm 50a1e2661bd2a523ebe11023e509896359521a5af77ecd35060cdf75d2c4543e
noarch ipa-client-common-4.12.2-22.el9_7.1.noarch.rpm 6181ebdc401e594ea9f842731031548ce3d0552f6a91587ffcdf2aca37217a9d
noarch python3-ipatests-4.12.2-22.el9_7.1.noarch.rpm 73735cb3f9e7836a82214b31eebc711a3dab45d846b482e539c88ccd41cc2083
noarch ipa-selinux-4.12.2-22.el9_7.1.noarch.rpm 7b155f0c86a36d68c0b3bed0c5157afe056d23fc3df22ec6f31257ec957835d6
noarch ipa-server-common-4.12.2-22.el9_7.1.noarch.rpm 988c777fb46e11f835b19d497070a6c61bc338ea0b4275aed4206668f0e9bb38
noarch ipa-selinux-nfast-4.12.2-22.el9_7.1.noarch.rpm b72932cb1ba38cfcbcde3cb0f3262cde848c6796030169e08d2bea75671ae3a9
noarch python3-ipaserver-4.12.2-22.el9_7.1.noarch.rpm dfa31aad064c014fb03cb03084e0a51da7fada5fca5418221a15a584114ceee1
ppc64le ipa-client-4.12.2-22.el9_7.1.ppc64le.rpm 1c3becfe2d694f5588f30bd37d9f52e605820208aaed8843eca412dc41caed64
ppc64le ipa-server-encrypted-dns-4.12.2-22.el9_7.1.ppc64le.rpm 5d23853d4855b4ae4fe6e5c02054d96b25146d267eaeb9001a8889eccb7e84cc
ppc64le ipa-server-trust-ad-4.12.2-22.el9_7.1.ppc64le.rpm 8df4c64f5d8c9343d91df25bdb1ed43d55f8b8f190decb23ed52722e4f6409b1
ppc64le ipa-client-samba-4.12.2-22.el9_7.1.ppc64le.rpm b0acc8b72032cc70be4af3f168e708e51fba77c4d1e8f3d45a77541c8a9774b2
ppc64le ipa-client-epn-4.12.2-22.el9_7.1.ppc64le.rpm b8cd94a7f216d7bfeec7085b623beaae0ad35f89dc305be9ecd1c49bff3a6fc5
ppc64le ipa-client-encrypted-dns-4.12.2-22.el9_7.1.ppc64le.rpm c06e2826a552378a111cea4e9e885826d0035776c701b763316890312e60412f
ppc64le ipa-server-4.12.2-22.el9_7.1.ppc64le.rpm fb785d408ea147da8ca15c93346219d49c067a29113f0b1c07cf9ef8eb466259
s390x ipa-client-samba-4.12.2-22.el9_7.1.s390x.rpm 0430cfab6b7c16a8b2d295d3539fb17238d6c8755bd5d8174c81fafc9f4bd811
s390x ipa-server-4.12.2-22.el9_7.1.s390x.rpm 5ed5e7443a868da6f4b3e65ee5d711075faab61682448ddc8a2dd354cc47cb9a
s390x ipa-client-epn-4.12.2-22.el9_7.1.s390x.rpm 6f57d0d5701fbecd05c56572464e000df6951f390dc67a3306f7ce3723f8e82b
s390x ipa-server-trust-ad-4.12.2-22.el9_7.1.s390x.rpm a2da593b97552011b198c5a2dc1e483680537d4d34754d50beb0f7bf42584aa5
s390x ipa-server-encrypted-dns-4.12.2-22.el9_7.1.s390x.rpm b772f24790de9822a9b438b31524d8ccd8cfa5ef88bf255d423b831ecf7923b0
s390x ipa-client-4.12.2-22.el9_7.1.s390x.rpm cce692baf0a0507495af20b5b3a3e868bcd708c7aca7d42e2387a7c680e0b709
s390x ipa-client-encrypted-dns-4.12.2-22.el9_7.1.s390x.rpm fdfff79347c1ac098ec0919b005d2d502226e8bfb624db3340e21047ff836011
x86_64 ipa-client-encrypted-dns-4.12.2-22.el9_7.1.x86_64.rpm 0e2902b7facb096e30cc29a18490c12bd57100cdaa5b2dfef7967431b06ba075
x86_64 ipa-client-epn-4.12.2-22.el9_7.1.x86_64.rpm 1b5c3cbf3bcb0ed837ba055b9b5c33069a95ee9a6939f1bec028975463350a28
x86_64 ipa-server-encrypted-dns-4.12.2-22.el9_7.1.x86_64.rpm 9518826ea2d1d42ec69b08e605d47bee583867cb889cd51c9b20ffb620773e10
x86_64 ipa-server-trust-ad-4.12.2-22.el9_7.1.x86_64.rpm c57e9a62409a964fc2c0eef24f262e140e6eca62d83b3e1fb3228429de3541e0
x86_64 ipa-client-4.12.2-22.el9_7.1.x86_64.rpm cb15ccedaf8a1811fd89f633adc9e2ab613d80edb4ffdfe144296db604b73c27
x86_64 ipa-server-4.12.2-22.el9_7.1.x86_64.rpm e8f4738c6e63b5d95b4a9b594b58cc4321b1448e0e06e6dc442e91664a6c0bab
x86_64 ipa-client-samba-4.12.2-22.el9_7.1.x86_64.rpm f3a65fbce955fd433067dffa9c5e813575611a65f0e7e6ef609e5fb8137caf8e
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.