ELSA-2025-17084

ELSA-2025-17084 - ipa security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-10-01

Description


[4.12.2-14.0.1.5]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
- Add bind to ipa-server-common Requires [Orabug: 36518596]

[4.12.2-14.5]
- Resolves: RHEL-110068
EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA

[4.12.2-14.4]
- Resolves: RHEL-110068
EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


Related CVEs


CVE-2025-7493

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) ipa-4.12.2-14.0.1.el9_6.5.src.rpm46c62bbe8009fff4ff09f4ff88e27daa88176012d48bec0a57262ed58ceb886a-ol9_aarch64_appstream
ipa-4.12.2-14.0.1.el9_6.5.src.rpm46c62bbe8009fff4ff09f4ff88e27daa88176012d48bec0a57262ed58ceb886a-ol9_aarch64_codeready_builder
ipa-client-4.12.2-14.0.1.el9_6.5.aarch64.rpm98fbea86a6d47d3cf41c3ddc1ba329d5e30f7d4f2194f39413f0bab31db89413-ol9_aarch64_appstream
ipa-client-common-4.12.2-14.0.1.el9_6.5.noarch.rpm1bd5bfe784b4e03553fe9027d67c2a4978c095d7bb49205503927027698cefef-ol9_aarch64_appstream
ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.5.aarch64.rpm7f633567c3457a6ea9a965081a1e11920798f4bf595770709193ec43c7cb6424-ol9_aarch64_appstream
ipa-client-epn-4.12.2-14.0.1.el9_6.5.aarch64.rpma68d49b848179679659fdd22c526bfda7ec288809d1b957b5637a5164c12aabc-ol9_aarch64_appstream
ipa-client-samba-4.12.2-14.0.1.el9_6.5.aarch64.rpm0d998c953c3be3bba0b1c10434f4e88a8dad70f28eea5dac6eca6ff6bdf7f036-ol9_aarch64_appstream
ipa-common-4.12.2-14.0.1.el9_6.5.noarch.rpm4d7f32c8472d35195ed5f282a06724204d067ed513d8c36e9312d0d2bab5dc18-ol9_aarch64_appstream
ipa-selinux-4.12.2-14.0.1.el9_6.5.noarch.rpme064e1c7eb150cf404c50586403f4c3353a26dd5b84f17d17e08de48813b1061-ol9_aarch64_appstream
ipa-selinux-luna-4.12.2-14.0.1.el9_6.5.noarch.rpm9a6abfba8ccf0341e169a163951997ee74cc98a7e6b02f308c1469e215e18609-ol9_aarch64_appstream
ipa-selinux-nfast-4.12.2-14.0.1.el9_6.5.noarch.rpm8f796c8c1d4d04b91380a6154f1e46ab68a4271b4558104a65ef6de7fa29a932-ol9_aarch64_appstream
ipa-server-4.12.2-14.0.1.el9_6.5.aarch64.rpm1c5217ced9c1b034a02afc572dec596215aa90572f975564762b812381c46de5-ol9_aarch64_appstream
ipa-server-common-4.12.2-14.0.1.el9_6.5.noarch.rpm37e44a9c95de02f2ba0ccd4d77cd8574354750f3fb0a4d07e9dde08644843258-ol9_aarch64_appstream
ipa-server-dns-4.12.2-14.0.1.el9_6.5.noarch.rpme72dcfed0fea655205eb7b2a172c2d4c3ed0759a4b6c4a82c247795fd06d4b43-ol9_aarch64_appstream
ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.5.aarch64.rpm1aced782d33ff7b07cdafe3c28ff0e1b9b84d7d680986ab70e9d0063511fffb9-ol9_aarch64_appstream
ipa-server-trust-ad-4.12.2-14.0.1.el9_6.5.aarch64.rpm65a01de89876d5a917229b57a6eb21bce7acb56f0cb471bddd7b94d208885474-ol9_aarch64_appstream
python3-ipaclient-4.12.2-14.0.1.el9_6.5.noarch.rpm85af17682eed449cbc92f4a774430693be7396474b1d35f53b058da6089c6c37-ol9_aarch64_appstream
python3-ipalib-4.12.2-14.0.1.el9_6.5.noarch.rpm83c60f57bd89f7c2970c0be8520aafba2c9b85debd8661b62200b629d1c75db0-ol9_aarch64_appstream
python3-ipaserver-4.12.2-14.0.1.el9_6.5.noarch.rpm3d76691d6905a85e65ae52803a1a43ef1235f97f8ac6adfe4956f76a0640c961-ol9_aarch64_appstream
python3-ipatests-4.12.2-14.0.1.el9_6.5.noarch.rpm332b78ba98033cf50a696be7142fcc01a5bdd253543ad645922adf335e4a569d-ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64) ipa-4.12.2-14.0.1.el9_6.5.src.rpm46c62bbe8009fff4ff09f4ff88e27daa88176012d48bec0a57262ed58ceb886a-ol9_x86_64_appstream
ipa-4.12.2-14.0.1.el9_6.5.src.rpm46c62bbe8009fff4ff09f4ff88e27daa88176012d48bec0a57262ed58ceb886a-ol9_x86_64_codeready_builder
ipa-client-4.12.2-14.0.1.el9_6.5.x86_64.rpm3f3df869313cfe0cf478025affedf9ae20fe346b0800e307147312b6109f229c-ol9_x86_64_appstream
ipa-client-common-4.12.2-14.0.1.el9_6.5.noarch.rpm1bd5bfe784b4e03553fe9027d67c2a4978c095d7bb49205503927027698cefef-ol9_x86_64_appstream
ipa-client-encrypted-dns-4.12.2-14.0.1.el9_6.5.x86_64.rpm17e1aef0070f62bd7712f5e642714d0841278fcad38df28dd3d71ec1e849b599-ol9_x86_64_appstream
ipa-client-epn-4.12.2-14.0.1.el9_6.5.x86_64.rpme4f0db2ea5e2d8e7afd11d07f987c5ae268b32e544437aeb7aa4aeb1aba68b02-ol9_x86_64_appstream
ipa-client-samba-4.12.2-14.0.1.el9_6.5.x86_64.rpmc755ae6fc4903d32f21f5485a4d9ca89518dcf7a3e532ec2f9b59ec1de5ce05c-ol9_x86_64_appstream
ipa-common-4.12.2-14.0.1.el9_6.5.noarch.rpm4d7f32c8472d35195ed5f282a06724204d067ed513d8c36e9312d0d2bab5dc18-ol9_x86_64_appstream
ipa-selinux-4.12.2-14.0.1.el9_6.5.noarch.rpme064e1c7eb150cf404c50586403f4c3353a26dd5b84f17d17e08de48813b1061-ol9_x86_64_appstream
ipa-selinux-luna-4.12.2-14.0.1.el9_6.5.noarch.rpm9a6abfba8ccf0341e169a163951997ee74cc98a7e6b02f308c1469e215e18609-ol9_x86_64_appstream
ipa-selinux-nfast-4.12.2-14.0.1.el9_6.5.noarch.rpm8f796c8c1d4d04b91380a6154f1e46ab68a4271b4558104a65ef6de7fa29a932-ol9_x86_64_appstream
ipa-server-4.12.2-14.0.1.el9_6.5.x86_64.rpm39ba069f5d2ab33eb95c6c8c38a2789361c520d9abb4b9234ebfb3987c2cad14-ol9_x86_64_appstream
ipa-server-common-4.12.2-14.0.1.el9_6.5.noarch.rpm37e44a9c95de02f2ba0ccd4d77cd8574354750f3fb0a4d07e9dde08644843258-ol9_x86_64_appstream
ipa-server-dns-4.12.2-14.0.1.el9_6.5.noarch.rpme72dcfed0fea655205eb7b2a172c2d4c3ed0759a4b6c4a82c247795fd06d4b43-ol9_x86_64_appstream
ipa-server-encrypted-dns-4.12.2-14.0.1.el9_6.5.x86_64.rpm681a3e571920287af3b0c5633e29554b6fdd7c35dcd17aaf376dbbc1f25d6123-ol9_x86_64_appstream
ipa-server-trust-ad-4.12.2-14.0.1.el9_6.5.x86_64.rpm9c06699eb7b67b1277fa01890799b9840d2f2c116a0bfd13a42aa405027fbfec-ol9_x86_64_appstream
python3-ipaclient-4.12.2-14.0.1.el9_6.5.noarch.rpm85af17682eed449cbc92f4a774430693be7396474b1d35f53b058da6089c6c37-ol9_x86_64_appstream
python3-ipalib-4.12.2-14.0.1.el9_6.5.noarch.rpm83c60f57bd89f7c2970c0be8520aafba2c9b85debd8661b62200b629d1c75db0-ol9_x86_64_appstream
python3-ipaserver-4.12.2-14.0.1.el9_6.5.noarch.rpm3d76691d6905a85e65ae52803a1a43ef1235f97f8ac6adfe4956f76a0640c961-ol9_x86_64_appstream
python3-ipatests-4.12.2-14.0.1.el9_6.5.noarch.rpm332b78ba98033cf50a696be7142fcc01a5bdd253543ad645922adf335e4a569d-ol9_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete